Vulnerabilities in blocksera
7 resultsVexday analysis
Blocksera apresenta um perfil de risco baixo com apenas 2 CVEs registrados e nenhum sob exploração ativa conhecida. A fraqueza dominante identificada é Cross-Site Scripting (CWE-79), típica de aplicações web, sem críticas severas (CVSS) e nenhuma publicação recente nos últimos 90 dias, indicando vulnerabilidades maduras sem atividade ofensiva contemporânea.
CVE-2022-44588CRITICALWordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL InjectionEPSS 2.2%CVE-2024-4780MEDIUMImage Hover Effects – Elementor Addon <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via eihe_link ParameterEPSS 0.5%CVE-2025-31539MEDIUMWordPress Cryptocurrency Widgets Pack plugin <= 2.0.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-57939MEDIUMWordPress Image Hover Effects – Elementor Addon Plugin <= 1.4.4 - Broken Access Control VulnerabilityEPSS 0.4%CVE-2024-29936MEDIUMWordPress Image Hover Effects – Elementor Addon plugin <= 1.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-1166MEDIUMImage Hover Effects - Elementor Addon <= 1.4.1 - Authenticated(Contributor+) DOM-based Stored Cross-Site Scripting via Image Hover Effects WidgetEPSS 0.3%CVE-2025-31025MEDIUMWordPress Image Hover Effects Block plugin <= 1.4.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%