Vulnerabilities in WPPOOL
7 resultsVexday analysis
WPPOOL registra 6 vulnerabilidades no histórico, sendo 2 divulgadas nos últimos 90 dias, sem incidentes de exploração ativa documentada até o momento. A fraqueza predominante é cross-site scripting (CWE-79), típica de aplicações web, e nenhuma das vulnerabilidades atingiu severidade crítica, reduzindo o impacto imediato no risco de fornecedor.
CVE-2025-30765HIGHWordPress FlexStock plugin <= 3.13.1 - SQL Injection VulnerabilityEPSS 0.6%CVE-2024-30437MEDIUMWordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-34375MEDIUMWordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-5449MEDIUMWP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing <= 5.0.4 - Missing AuthorizationEPSS 0.3%CVE-2023-26535MEDIUMWordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-24582MEDIUMWordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57379HIGHWordPress FormyChat plugin <= 2.15.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%