Vulnerabilities in averta

57 results
Vexday analysis

A Averta possui 43 vulnerabilidades catalogadas, com predominância de falhas de cross-site scripting (CWE-79), mas sem registros de exploração ativa em campo (KEV = 0) nem vulnerabilidades críticas. Nenhuma vulnerabilidade foi publicada nos últimos 90 dias, indicando um risco estável e sem pressão imediata de remediação.

CVE-2024-1384MEDIUMPremium Portfolio Features for Phlox theme <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-3587MEDIUMPremium Portfolio Features for Phlox theme <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ' Grid Portfolios'EPSS 0.4%CVE-2023-50368MEDIUMWordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-8486MEDIUMShortcodes and extra features for Phlox theme <= 2.16.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Modern Heading and Icon Picker WidgetsEPSS 0.4%CVE-2024-31099MEDIUMWordPress Phlox Core Elements plugin <= 2.15.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-37222HIGHWordPress Master Slider plugin <= 3.10.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-6382MEDIUMMaster Slider - Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-4470MEDIUMMaster Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-4375MEDIUMMaster Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer ShortcodeEPSS 0.3%CVE-2024-9545MEDIUMShortcodes and extra features for Phlox theme <= 2.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via aux_contact_box and aux_gmaps ShortcodesEPSS 0.3%CVE-2024-32580MEDIUMWordPress Master Slider plugin <= 3.9.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-47359MEDIUMWordPress Depicter plugin <= 3.2.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-43161MEDIUMWordPress Slider & Popup Builder by Depicter plugin <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-13757MEDIUMMaster Slider – Responsive Touch Slider <= 3.10.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer ShortcodeEPSS 0.3%CVE-2025-63071MEDIUMWordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.15 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2024-11731MEDIUMMaster Slider – Responsive Touch Slider <= 3.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_slider ShortcodeEPSS 0.3%CVE-2024-47381MEDIUMWordPress Slider & Popup Builder by Depicter plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-37414MEDIUMWordPress Depicter Slider plugin <= 3.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-6326MEDIUMMaster Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_actionEPSS 0.3%CVE-2025-63045MEDIUMWordPress Master Slider Pro plugin <= 3.7.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%