Vulnerabilities in bestwebsoft
30 resultsVexday analysis
A Bestwebsoft possui 9 vulnerabilidades catalogadas, com 1 publicada nos últimos 90 dias, mas nenhuma sob exploração ativa conhecida (KEV) ou classificada como crítica. A fraqueza predominante é CWE-862 (falta de autorização), indicando problemas de controle de acesso em seus produtos, o que representa risco moderado dependendo do contexto de exposição dos ativos.
CVE-2022-44734MEDIUMWordPress Car Rental by BestWebSoft Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-31295MEDIUMWordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilityEPSS 0.4%CVE-2023-28778MEDIUMWordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2012-10010MEDIUMBestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgeryEPSS 0.4%CVE-2012-10017MEDIUMBestWebSoft Portfolio Plugin cross-site request forgeryEPSS 0.4%CVE-2012-10012MEDIUMBestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgeryEPSS 0.3%CVE-2025-24628MEDIUMWordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerabilityEPSS 0.3%CVE-2025-63056MEDIUMWordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-24598MEDIUMWordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-57642HIGHWordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerabilityEPSS 0.2%