聚合 NVD、CVE 及多源情資，深度解析 RCE 等高危風險。系統整合 CVSS 與 EPSS 模型，動態追蹤 Exploit 資源與 PoC 公開狀態，研判可利用性。結合官方修補與修復方案，優化漏洞管理優先級，縮短回應週期，保障資產安全。
指派機構（CNA / 來源）：[email protected] 移除此篩選
| CVE | 描述 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|
| CVE-2026-27404 | Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2026-27402 | Unauthenticated Cross Site Scripting (XSS) in Kids Life | Children School WordPress <= 5.2 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2026-27060 | Contributor PHP Object Injection in ARMember Premium <= 7.0 versions. | 8.8 | 0.29% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69156 | Unauthenticated Cross Site Scripting (XSS) in Kids Zone - Children WordPress Theme <= 5.4 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69155 | Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress Theme <= 5.7 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69154 | Unauthenticated Cross Site Scripting (XSS) in SpaLab | Beauty Salon WordPress Theme <= 6.7 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69153 | Unauthenticated Cross Site Scripting (XSS) in Trendy Travel <= 6.7 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69152 | Unauthenticated Cross Site Scripting (XSS) in Artale | Wedding Photography WordPress <= 2.2.2 versions. | 7.1 | 0.18% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69134 | Unauthenticated Arbitrary Content Deletion in OpenAI Chatbot for WordPress – Helper <= 1.1.4 versions. | 7.5 | 0.30% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69133 | Subscriber Local File Inclusion in Tourmaster <= 5.4.5 versions. | 7.5 | 0.40% | 2026-07-02 | 2026-07-02 |
| CVE-2025-69094 | Subscriber SQL Injection in Unicamp <= 2.2.2 versions. | 8.5 | 0.28% | 2026-07-02 | 2026-07-02 |
| CVE-2025-58902 | Unauthenticated Local File Inclusion in Lighthouse <= 1.2.12 versions. | 8.1 | 0.28% | 2026-07-02 | 2026-07-02 |
| CVE-2026-57736 | Insertion of Sensitive Information Into Sent Data vulnerability in HubSpot allows Retrieve Embedded Sensitive Data. This issue affects HubSpot: from n/a through 11.3.51. | 7.4 | 0.18% | 2026-07-01 | 2026-07-01 |
| CVE-2026-57723 | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows Path Traversal. This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.12. | 7.4 | 0.12% | 2026-07-01 | 2026-07-01 |
| CVE-2026-57692 | Incorrect Privilege Assignment vulnerability in LCweb PrivateContent allows Privilege Escalation. This issue affects PrivateContent: from n/a through 9.9.2. | 9.8 | 0.29% | 2026-07-01 | 2026-07-01 |
| CVE-2026-57338 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. | 7.1 | 0.15% | 2026-06-29 | 2026-06-29 |
| CVE-2026-57337 | Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. | 7.1 | 0.15% | 2026-06-29 | 2026-06-29 |
| CVE-2026-57336 | Unauthenticated Cross Site Scripting (XSS) in Jobify <= 4.3.2 versions. | 7.1 | 0.15% | 2026-06-29 | 2026-06-29 |
| CVE-2026-57333 | Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions. | 7.1 | 0.15% | 2026-06-29 | 2026-06-29 |
| CVE-2026-57332 | Subscriber Broken Access Control in Wallet System for WooCommerce <= 2.7.6 versions. | 7.1 | 0.26% | 2026-06-29 | 2026-06-29 |