Vulnerabilities in codemenschen

6 results

Vexday analysis

A codemenschen possui apenas 2 vulnerabilidades registradas na base, nenhuma delas sob ataque ativo ou crítica, com a fraqueza dominante sendo injeção de conteúdo (CWE-79). O perfil de risco é baixo, sem novos registros nos últimos 90 dias, indicando exposição mínima no cenário de ameaças atual.

CVE-2024-9165MEDIUMGift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2024-51907MEDIUMWordPress WP Virtual Room Configurator plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-13520MEDIUMGift Cards (Gift Vouchers and Packages) (WooCommerce Supported) <= 4.4.9 - Missing Authorization to Unauthenticated Price, Date, and Note UpdatesEPSS 0.3%CVE-2026-57412MEDIUMWordPress Gift Vouchers plugin <= 4.6.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-32436MEDIUMWordPress Gift Cards plugin <= 4.4.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-57415HIGHWordPress Gift Vouchers plugin <= 4.7.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%