BaiduXZH Submit(百度熊掌号)
BaiduXZH Submit(百度熊掌号) has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for BaiduXZH Submit(百度熊掌号) has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. BaiduXZH Submit(百度熊掌号) is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.0.27.
CVE-2025-49063BaiduXZH Submit(百度熊掌号) <= 1.4.6 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

BaiduXZH Submit(百度熊掌号)
Author
i3geek
** This plugin relying on a 3rd party i3geek.com as a service, in order to get the latest official Baidu’s protocol. (more details see FAQ)** After installing BaiduXZH Submit, you can quickly and completely submit webpages to Baidu. Include: Automatic submitting real-time content: after the article or page published, automatically submit URL to Baidu official, within 24 hours to complete the Baidu collection Submitting original protection content: when publishing original articles or pages, apply for original protection automatically and submit URL to Baidu official. In order to protect the originality. Customizing submitted content type: support custom content types, including but not limited to: articles, pages Submitting historical content batch: support batch submission to Baidu Submission type modification Manual submission Display the results of the submission Review the submission record It helps you with the following: Baidu Spider will better understand and include your site. Baidu Search will better display results from your site. 安装BaiduXZH Submit后,能又快又全的向百度提交内容(包括文章和页面),主要功能有: 实时内容自动提交:当发布文章或页面后,自动将URL提交至百度官方,24小时内完成百度收录 原创保护内容提交:当发布原创的文章或页面后,自动申请原创保护并将URL提交至百度官方,在收录的同时第一时间保证了原创性 可选内容类型:支持自定义内容类型,包括但不限于:文章、页面等 历史内容批量提交:对站点的历史内容(如文章或页面等),支持批量提交至百度完成收录 提交类型修改:可在编辑页中,手动选择提交类型(1小时内发布可修改为原创提交,1天内发布可修改为实时提交) 手动提交:列表页中可选择指定内容进行手动提交 提交结果展示:列表页中展示每条内容的提交结果 提交记录查看:对提交记录(包括手动或自动)成功或失败统一查看 使用本插件有助于: 不仅仅展现在百度的收录结果中,更可以收录在熊掌号中(原百家号) 24小时内被百度收录,更实时 原创文章进行原创保护,避免他人抄袭 使百度 Spider 更好的了解您的网站,优化收录 使网站在百度搜索上得到更好的展现,提高百度的索引量,网站的知名度 获得专业版:GET PRO 页面结构化改造:符合百度官方的页面要求,提高曝光率,增加索引量 增加粉丝关注入口:在查看文章时增加“关注”按钮,从而有效推广自己的熊掌号 MIP/H5页面改造:定制化改造 未提交文章检索:对站点未提交过的文章进行批量的检索 批量提交内容:对内容(包括文章和页面等)进行批量的提交 高级支持:一对一的技术支持 自动更新:新版本发布时自动更新
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C