Related VulnerabilitiesPoCCVE-2026-49049: JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File WritePoCCVE-2025-34030: sar2html <=3.2.2 Plot Parameter - Remote Code ExecutionPoCImgproxy /unsafe/plain 服务器端请求伪造漏洞(CVE-2025-24354)PoCCVE-2015-2755: WordPress AB Google Map Travel <=3.4 - Stored Cross-Site ScriptingPoCCVE-2016-1000128: WordPress anti-plagiarism <=3.60 - Cross-Site ScriptingPoCCVE-2016-1000129: WordPress defa-online-image-protector <=3.3 - Cross-Site ScriptingPoCCVE-2016-1000149: WordPress Simpel Reserveren <=3.5.2 - Cross-Site ScriptingPoCCVE-2018-11227: Monstra CMS <=3.0.4 - Cross-Site ScriptingPoCCVE-2018-16836: Rubedo CMS <=3.4.0 - Directory TraversalPoCCVE-2019-11013: Nimble Streamer <=3.5.4-9 - Local File InclusionPoCCVE-2020-10549: rConfig <=3.9.4 - SQL InjectionPoCCVE-2020-13700: WordPress acf-to-rest-api <=3.1.0 - Insecure Direct Object Reference