Vulnerabilities in Stranger Studios

4 results

Vexday analysis

Stranger Studios apresenta footprint reduzido de 4 vulnerabilidades no ecossistema, nenhuma em exploração ativa conhecida. A fraqueza dominante é CWE-352 (Cross-Site Request Forgery), padrão típico em aplicações web, com 1 descoberta recente nos últimos 90 dias indicando que o fornecedor mantém exposição a vetores bem consolidados.

CVE-2021-20678—SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SEPSS 2.0%CVE-2020-5579—SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SEPSS 1.2%CVE-2023-28419MEDIUMWordPress Force First and Last Name as Display Name Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.4%CVE-2026-57659HIGHWordPress Paid Memberships Pro - Add Member From Admin plugin <= 0.7.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%