Vulnerabilities in WPExpertsio
7 resultsVexday analysis
WPExpertsio apresenta perfil de risco mínimo com apenas 1 vulnerabilidade registrada na base, sem ataques ativos documentados ou severidade crítica. A falha identificada (CWE-352 - Cross-Site Request Forgery) é de natureza clássica e não recente, refletindo exposição baixa e controlável através de práticas padrão de mitigação.
CVE-2022-47182MEDIUMWordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access ControlEPSS 0.5%CVE-2023-49842MEDIUMWordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-15275HIGHWP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' ParameterEPSS 0.4%CVE-2024-27959HIGHWordPress APIExperts Square for WooCommerce plugin <= 4.2.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-12475MEDIUMWP Multi Store Locator <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2022-47181MEDIUMWordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-50902MEDIUMWordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%