Vulnerabilities in RealMag777
125 resultsVexday analysis
RealMag777 apresenta 36 vulnerabilidades catalogadas, com 9 divulgações nos últimos 90 dias, indicando atividade recente de descobertas; embora nenhuma esteja sob exploração ativa conhecida (KEV), 6 são classificadas como críticas e o padrão dominante aponta para falhas de validação de entrada (CWE-79), típicas de impacto elevado em contextos web.
CVE-2024-5039MEDIUMHUSKY – Products Filter Professional for WooCommerce <= 1.3.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-29906MEDIUMWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-22159HIGHWordPress WOLF Plugin <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-11735HIGHHUSKY – Products Filter Professional for WooCommerce <= 1.3.7.1 - Unauthenticated SQL Injection via `phrase` ParameterEPSS 0.3%CVE-2024-32818MEDIUMWordPress MDTF – Meta Data and Taxonomies Filter plugin <= 1.3.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-11400MEDIUMHUSKY – Products Filter for WooCommerce <= 1.3.6.3 - Reflected Cross-Site Scripting via really_curr_tax ParameterEPSS 0.3%CVE-2024-38700MEDIUMWordPress WPCS – WordPress Currency Switcher Professional plugin <= 1.2.0.3 - Arbitrary Shortcode Execution vulnerabilityEPSS 0.3%CVE-2025-13110MEDIUMHUSKY – Products Filter Professional for WooCommerce <= 1.3.7.3 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'woof_add_subscr'EPSS 0.3%CVE-2024-24834MEDIUMWordPress BEAR Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2023-4920MEDIUMBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-39501MEDIUMWordPress FOX plugin <= 1.4.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-0790MEDIUMWOLF – WordPress Posts Bulk Editor and Manager Professional <= 1.0.8.1 - Cross-Site Request ForgeryEPSS 0.3%CVE-2023-51480MEDIUMWordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-13340MEDIUMMDTF – Meta Data and Taxonomies Filter <= 1.3.3.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-49907MEDIUMWordPress MDTF plugin <= 1.3.3.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-10168MEDIUMActive Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button ShortcodeEPSS 0.3%CVE-2025-54707CRITICALWordPress MDTF Plugin <= 1.3.3.7 - SQL Injection VulnerabilityEPSS 0.3%CVE-2023-33314MEDIUMWordPress BEAR Plugin <= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-4926MEDIUMBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product DeletionEPSS 0.3%CVE-2023-4923MEDIUMBEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product DeletionEPSS 0.3%