Vulnerabilities in Denishua

5 results

Vexday analysis

Denishua apresenta footprint mínimo de risco com apenas 1 CVE registrado na base, sem incidentes de ataque ativo ou severidade crítica identificada. A vulnerabilidade catalogada refere-se a proteção insuficiente contra falsificação de solicitações entre sites (CWE-352), sem registros de exploração recente.

CVE-2026-57371HIGHWordPress WPJAM Basic plugin <= 7.0 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-32523CRITICALWordPress WPJAM Basic plugin <= 6.9.2 - Arbitrary File Upload vulnerabilityEPSS 0.3%CVE-2023-25051MEDIUMWordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-57372HIGHWordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-12827MEDIUMTop Friends <= 0.3 - Cross-Site Request Forgery to Settings UpdateEPSS 0.1%