References https://www.cve.org/CVERecord?id=CVE-2025-8751 https://nvd.nist.gov/vuln/detail/CVE-2025-8751 https://vuldb.com/?id.319245 https://news.fmisec.com/self-html-injection-in-total-webshield-chrome-extension https://cve.imfht.com/detail/CVE-2025-8751 https://access.redhat.com/security/cve/cve-2025-8751 https://www.redpacketsecurity.com/cve_alert_cve-2025-8751/ https://vulners.com/cve/CVE-2025-8751
Related VulnerabilitiesPoCCVE-2026-60105: Monsta FTP <= 2.14.4 - Unauthenticated SSRF via IPv6 Blocklist BypassPoCCVE-2026-5032: W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token DisclosurePoCCVE-2026-9282: W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File ReadWordPress W3 Total Cache /?w3tc_minify 文件读取漏洞(CVE-2026-9282)WordPress Frontend Login and Registration Blocks /wp-admin/admin-ajax.php 权限绕过漏洞(CVE-2025-3605)PoCCVE-2024-12008: W3 Total Cache < 2.8.2 - Log File ExposurePoCCVE-2026-46725: TYPO3 ceselector Extension - Insecure DeserializationPoCCVE-2026-48907: Joomla! JCE extension < 2.9.99.5 unauthenticated RCEWordPress Easy Appointments插件 /eablocks/ea_appointments/ 信息泄露漏洞(CVE-2026-2262)PoCCVE-2026-38361: dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunksPoCCVE-2025-1361: IP2Location Country Blocker < 2.38.9 - Unauthenticated Information DisclosurePoCblockchain-rpc-debug-exposure: Blockchain RPC Debug Trace Methods - ExposurePoCblockchain-rpc-txpool-exposed: Blockchain RPC - txpool_content Exposed