Vulnerabilities in e-plugins
33 resultsVexday analysis
A e-plugins acumula 32 vulnerabilidades registradas, com 1 crítica (CVSS), mas nenhuma sob exploração ativa conhecida. A fraqueza dominante é autorização inadequada (CWE-862), padrão que sugere falhas sistemáticas em controle de acesso. Não há atividade recente (zero publicações nos últimos 90 dias), indicando que o risco atual é de médio impacto, sem urgência operacional imediata.
CVE-2025-69192HIGHWordPress Real Estate Pro plugin <= 2.1.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-69187HIGHWordPress Final User plugin <= 1.2.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-69185HIGHWordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-69184HIGHWordPress Institutions Directory plugin <= 1.3.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-52748HIGHWordPress Directory Pro plugin <= 2.5.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-64243MEDIUMWordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54717MEDIUMWordPress WP Membership Plugin <= 1.6.3 - Settings Change VulnerabilityEPSS 0.2%CVE-2026-27396HIGHWordPress Directory Pro plugin <= 2.5.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-58638HIGHWordPress Institutions Directory Plugin <= 1.3.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-69056HIGHWordPress Hotel Listing plugin <= 1.4.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-69085HIGHWordPress JobBank plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-12551HIGHWordPress ListingHub plugin 1.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-28127HIGHWordPress Lawyer Directory plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%