Vulnerabilities in cozyvision1
11 resultsVexday analysis
CozyVision apresenta 11 vulnerabilidades catalogadas, com 3 classificadas como críticas e 5 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma vulnerabilidade está sob exploração ativa confirmada no momento, mas a predominância de CWE-89 (SQL Injection) sinaliza fraqueza estrutural em validação de entrada que merece atenção prioritária. O ritmo de divulgações recentes sugere que a superfície de ataque ainda está sendo mapeada.
CVE-2026-11387CRITICALSMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password ResetEPSS 2.2%CVE-2024-13553CRITICALSMS Alert Order Notifications – WooCommerce <= 3.7.9 - Unauthenticated Account Takeover/Privilege EscalationEPSS 0.5%CVE-2024-11725HIGHSMS Alert Order Notifications – WooCommerce <= 3.7.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateEPSS 0.5%CVE-2026-15014CRITICALSMS Alert <= 3.9.7 - Unauthenticated Authentication Bypass to Account Takeover via 'billing_phone' ParameterEPSS 0.5%CVE-2025-3876HIGHSMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Subscriber+) Privilege Escalation via handleWpLoginCreateUserAction FunctionEPSS 0.4%CVE-2024-10233MEDIUMSMSAlert - WooCommerce <= 3.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_subscribe ShortcodeEPSS 0.3%CVE-2026-15673MEDIUMSMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'checkout_payment_plans' and 'order_status' SettingsEPSS 0.3%CVE-2026-15671MEDIUMSMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' ParameterEPSS 0.3%CVE-2025-3878MEDIUMSMS Alert Order Notifications – WooCommerce <= 3.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via sa_verify ShortcodeEPSS 0.3%CVE-2026-15670MEDIUMSMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'orderby' ParameterEPSS 0.3%CVE-2024-1489MEDIUMSMS Alert Order Notifications – WooCommerce <= 3.6.9 - Cross-Site Request ForgeryEPSS 0.2%