Vulnerabilities in WPFactory

48 results
Vexday analysis

WPFactory apresenta 48 vulnerabilidades catalogadas, com 5 classificadas como críticas e nenhuma em exploração ativa conhecida, reduzindo o risco imediato. A fraqueza dominante é Cross-Site Scripting (CWE-79), padrão em plugins WordPress, com apenas 1 vulnerabilidade publicada nos últimos 90 dias indicando atividade moderada de descobertas.

CVE-2024-30536MEDIUMWordPress Slugs Manager plugin <= 2.6.7 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-24992MEDIUMWordPress Advanced WooCommerce Product Sales Reporting plugin <= 4.1.2 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-58985MEDIUMWordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-68528MEDIUMWordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49510MEDIUMWordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-39437HIGHWordPress Min Max Step Quantity Limits Manager for WooCommerce plugin <= 5.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-62096MEDIUMWordPress Maximum Products per User for WooCommerce plugin <= 4.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-69334MEDIUMWordPress Wishlist for WooCommerce plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%