Related VulnerabilitiesPoCCVE-2026-41948: Dify <=1.14.1 - Unauthenticated Plugin Daemon Path TraversalJenkins 代码执行漏洞(CVE-2026-84645)JeecgBoot 积木报表 /jmreport/auto/export/python/plugin 代码执行漏洞PoCCVE-2025-14998: Branda WordPress plugin - Privilege EscalationPoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCEPoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCCVE-2026-3001: Gutenverse Plugin <= 3.4.6 - Cross-Site ScriptingPoCCVE-2025-6389: Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_funcPoCclaude-settings-exposure: Claude Code Project Settings ExposurePoCCVE-2026-3296: Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告Stripe Payment Plugin for WooCommerce /wc-api/WT_Stripe/ SQL 注入漏洞(CVE-2024-0705)FOGProject /fog/management/export.php 信息泄露漏洞(CVE-2025-58443)