Vulnerabilities in SeventhQueen
11 resultsVexday analysis
SeventhQueen possui 9 vulnerabilidades registradas, das quais 3 são críticas, mas nenhuma está sob exploração ativa conhecida no momento. A fraqueza dominante é Cross-site Scripting (CWE-79), indicando deficiências em validação de entrada; o risco recente é baixo com apenas 1 CVE publicado nos últimos 90 dias, sugerindo um panorama relativamente estável.
CVE-2024-43222CRITICALWordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerabilityEPSS 0.8%CVE-2024-56000CRITICALWordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerabilityEPSS 0.5%CVE-2025-64363HIGHWordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-27417CRITICALWordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-12102MEDIUMTyper Core <= 1.9.6 - Authenticated (Contributor+) Post DisclosureEPSS 0.3%CVE-2024-56209HIGHWordPress Kleo theme < 5.4.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-39367MEDIUMWordPress Kleo theme < 5.4.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-12391MEDIUMRestrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status UpdateEPSS 0.3%CVE-2026-22465HIGHWordPress BuddyApp theme <= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-69140HIGHWordPress SweetDate Core plugin < 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64362MEDIUMWordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%