Vulnerabilities in WHA

5 results

Vexday analysis

O fornecedor WHA apresenta um portfólio reduzido de 5 vulnerabilidades, nenhuma delas em exploração ativa ou classificada como crítica. A fraqueza predominante é XSS (CWE-79), típica de aplicações web, sem atividade recente que sinalize pressão imediata no ecossistema.

CVE-2022-36365MEDIUMWordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesEPSS 0.7%CVE-2022-37335MEDIUMWordPress Word Search Puzzles game plugin <= 2.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2022-37330MEDIUMWordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2022-36383MEDIUMWordPress Word Search Puzzles game plugin <= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesEPSS 0.5%CVE-2022-45839MEDIUMWordPress WHA Puzzle Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%