Vulnerabilities in Galaxy Weblinks

6 results

Vexday analysis

Galaxy Weblinks apresenta um perfil de risco moderado com 6 vulnerabilidades catalogadas, todas de severidade inferior a crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante é a falta de proteção CSRF (CWE-352), típica de falhas de validação de requisições, sem registros de exploração recente na base de ataques conhecidos.

CVE-2025-32183MEDIUMWordPress Video Playlist For YouTube plugin <= 6.7.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2022-42485MEDIUMWordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2025-31872MEDIUMWordPress WP Clone any post type Plugin <= 3.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-31871MEDIUMWordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerabilityEPSS 0.4%CVE-2023-45653MEDIUMWordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-60137MEDIUMWordPress Post Featured Video Plugin <= 1.7 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%