Vulnerabilities in cscode
6 resultsVexday analysis
O fornecedor cscode apresenta uma postura de risco moderada com 6 vulnerabilidades catalogadas, nenhuma delas atualmente explorada ativamente no cenário de ameaças. A ausência de críticas e publicações recentes indica estabilização do portfólio de segurança, embora a fraqueza dominante em controle de acesso (CWE-862) aponte para falhas estruturais que merecem remediação proativa.
CVE-2024-2043MEDIUMEleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Missing Authorization to Sensitive Information ExposureEPSS 0.5%CVE-2024-6626MEDIUMEleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing AuthorizationEPSS 0.4%CVE-2024-2082HIGHEleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.4%CVE-2025-50008MEDIUMWordPress WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily plugin <= 1.2.4.5 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-32514HIGHWordPress WooCommerce Estimate and Quote plugin <= 1.0.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-6628MEDIUMEleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request ForgeryEPSS 0.2%