WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买

WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 has a vendor fix available, so running the current release closes it.

All of these findings were reported by Rio Darmawan. WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-39988

WxSync <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2023-08-09 00:00	WxSync <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买 <= 2.8.0	`CVE-2023-39988`	6.4 Medium	Rio Darmawan	Yes

Showing 1–1 of 1 reports

Plugin Profile

Latestv2.8.2

WxSync-标准云微信公众号文章免费采集-任意公众号自动采集付费购买

Author

cnfang

5.0(1)

100/100

Last Updated

2025-03-19 (2y ago)

Active Installs

400+

Downloads

31,497

Requires WP

Requires PHP

Tested up to

WP 6.3.10

Created

2018-01-11 (9y ago)

微信公众号文章,任意公众号自动采集付费购买,手动采集服务永久免费,付费地址是:http://std.cloud,插件设置面板将自动提示最新版本,会自动请求第三方服务器地址:http://std.cloud/web/ver

View on WordPress.org