Vulnerabilities in grandplugins

3 results

Vexday analysis

GrandPlugins apresenta footprint mínimo na base Vexday com apenas 1 CVE catalogada, nenhuma sob exploração ativa conhecida. A vulnerabilidade registrada é de Injeção XSS (CWE-79), padrão em plugins web, mas sem críticas CVSS e sem movimentação recente, indicando risco baixo no contexto atual.

CVE-2023-47657MEDIUMWordPress Direct Checkout – Quick View – Buy Now For WooCommerce Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-9060MEDIUMAVIF & SVG Uploader <= 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.4%CVE-2025-49973MEDIUMWordPress Image Sizes Controller, Create Custom Image Sizes, Disable Image Sizes plugin <= 1.0.10 - Broken Access Control VulnerabilityEPSS 0.3%