Vulnerabilities in WeDevs
110 resultsVexday analysis
WeDevs apresenta perfil de risco baixo com apenas 1 CVE registrado na base, nenhum sob exploração ativa conhecida e sem criticidade máxima associada. A vulnerabilidade identificada refere-se a injeção SQL (CWE-89), fraqueza clássica que requer atenção, mas não há evidência de exploração em campo nem publicações recentes que indiquem urgência imediata.
CVE-2026-95524MEDIUMWordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2025-12809MEDIUMdokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information ExposureEPSS 0.2%CVE-2025-58673MEDIUMWordPress WP User Frontend Plugin <= 4.1.12 - Content Injection VulnerabilityEPSS 0.2%CVE-2023-52217MEDIUMWordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-12505MEDIUMweDocs <= 2.1.14 - Missing Authorization to Settings UpdateEPSS 0.2%CVE-2026-2233MEDIUMUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' ParameterEPSS 0.2%CVE-2026-24944MEDIUMWordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-32280MEDIUMWordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2024-13436MEDIUMAppsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.1%CVE-2022-47150MEDIUMWordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%