Vulnerabilities in WebWizards

7 results

Vexday analysis

WebWizards apresenta footprint reduzido com 3 CVEs catalogadas, sendo 1 crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-269 - Improper Access Control) indica falhas estruturais em controle de acesso; com 1 vulnerabilidade publicada nos últimos 90 dias, o risco permanece atual mas contido pela baixa exploração observada.

CVE-2024-22157CRITICALWordPress SalesKing plugin <= 1.6.15 - Unauthenticated Privilege Escalation vulnerabilityEPSS 0.6%CVE-2026-27399MEDIUMWordPress MarketKing plugin <= 2.1.40 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-58702MEDIUMWordPress MarketKing Plugin <= 2.0.92 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-93341MEDIUMMarketKing < 2.1.72 Missing Authorization via marketking_send_refund AJAXEPSS —CVE-2026-93343HIGHMarketKing < 2.1.72 Missing Authorization via marketking_admin_vendors_ajaxEPSS —CVE-2026-93344HIGHMarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAXEPSS —CVE-2026-93342MEDIUMMarketKing < 2.1.72 Missing Authorization via marketking_duplicate_product AJAXEPSS —