Vulnerabilities in DevItems
10 resultsVexday analysis
DevItems apresenta 10 vulnerabilidades catalogadas, nenhuma em exploração ativa no momento e sem críticas registradas. O risco é dominado por falhas de validação de entrada (CWE-79), embora sem urgência imediata pela ausência de publicações recentes ou ataques documentados.
CVE-2024-32782MEDIUMWordPress HT Mega plugin <= 2.4.7 - Sensitive Data Exposure vulnerabilityEPSS 0.9%CVE-2024-38706MEDIUMWordPress HT Mega plugin <= 2.5.7 - JSON Path Traversal vulnerabilityEPSS 0.7%CVE-2025-30777MEDIUMWordPress Support Genix plugin <= 1.4.11 - Insecure Direct Object References (IDOR) VulnerabilityEPSS 0.5%CVE-2024-30182MEDIUMWordPress HT Mega – Absolute Addons For Elementor plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-24624HIGHWordPress HT Event – WordPress Event Manager Plugin for Elementor Plugin <= 1.4.6 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-49630MEDIUMWordPress WP Education for Elementor plugin <= 1.2.8 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54695MEDIUMWordPress HT Mega Plugin plugin <= 2.9.0 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-51673MEDIUMWordPress HT Politic plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58635MEDIUMWordPress Support Genix Plugin <= 1.4.23 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-58990MEDIUMWordPress ShopLentor Plugin <= 3.2.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%