相关漏洞推荐 WordPress Plugin Alone Theme /wp-admin/admin-ajax.php beplus_import_pack_install_plugin 文件上传漏洞(CVE-2025-5394) POC CVE-2021-37415: Zoho ManageEngine ServiceDesk Plus - Authentication Bypass POC CVE-2021-4073: RegistrationMagic <= 5.0.1.7 - Authentication Bypass POC CVE-2023-23897: Ozette Plugins - Cross-Site Request Forgery POC CVE-2023-45038: QNAP Music Station < 5.4.0 - Authentication Bypass POC wp-woocommerce-admin-fpd: WordPress Plugin WooCommerce Admin (woocommerce-admin) Full Path Disclosure POC CVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE) POC CVE-2021-4449: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload POC CVE-2023-2734: MStore API <= 3.9.1 - Authentication Bypass POC CVE-2023-5815: News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion POC CVE-2025-10204: AC Smart II - Authentication Bypass POC CVE-2021-4449: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload POC CVE-2025-49706: Microsoft SharePoint Server - Authentication Bypass