Related VulnerabilitiesPoCCVE-2026-0743: WP Content Permission <= 1.2 - Cross-Site Scripting仁和兴业(深圳)软件有限公司仁和云ERPbackupexportall 接口存在任意文件读取漏洞PoCmixed-active-content: Mixed Active ContentVersa Concerto /portalapi/v1/roles/option 权限绕过漏洞(CVE-2025-34027)MasterStudy LMS /wp-admin/admin-ajax.php?action=stm_lms_load_content 文件包含漏洞(CVE-2024-3136)WordPress LearnPress /wp-json/lp/v1/load_content_via_ajax 信息泄露漏洞(CVE-2025-11368)广联达OA /GTP/IM/Services/Group/Broadcast/MsgBroadcastContent.aspx SQL 注入漏洞TRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)WIFISKY 7层流控路由器 /portal/ibilling/index.php 命令执行漏洞大华智慧园区综合管理平台 /portal/itc/attachment_downloadByUrlAtt.action 文件读取漏洞HIKVISION 综合安防管理平台 /artemis-portal/artemis/env 信息泄露漏洞WordPress Plugin Mayosis Core /wp-content/plugins/mayosis-core/library/wave-audio/peaks/remote_dl.php 文件读取漏洞 (CVE-2025-1565)秒优科技-供应链管理系统 /Content/page/attachmentImg.aspx 信息泄露漏洞