Vulnerabilities in Designinvento
12 resultsVexday analysis
Designinvento apresenta 9 vulnerabilidades catalogadas, todas de severidade moderada ou baixa, sem exploração ativa conhecida registrada. A fraqueza dominante é injeção de script (CWE-79), típica de aplicações web, mas nenhuma publicação recente indica que o risco está estabilizado ou em fase de remediação lenta.
CVE-2023-37967MEDIUMWordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control VulnerabilityEPSS 0.7%CVE-2024-38755HIGHWordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerabilityEPSS 0.7%CVE-2026-3489HIGHDirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages'EPSS 0.4%CVE-2024-32567HIGHWordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-49633HIGHWordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-10584MEDIUMDirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-27387MEDIUMWordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-23548MEDIUMWordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-32249MEDIUMWordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-39566MEDIUMWordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2024-10581MEDIUMDirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status UpdateEPSS 0.2%CVE-2025-62967MEDIUMWordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%