Vulnerabilities in infosoftplugin

4 results

Vexday analysis

A infosoftplugin apresenta 4 vulnerabilidades registradas na base, nenhuma com exploração ativa confirmada e sem críticas de severidade alta. A fraqueza dominante é CWE-79 (injeção de scripts), tipicamente de impacto moderado e facilmente explorável, mas sem indícios de atividade recente que elevariam o risco imediato.

CVE-2025-32541HIGHWordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-23731HIGHWordPress Tax Report for WooCommerce plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-22337HIGHWordPress Order Audit Log for WooCommerce plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-52820HIGHWordPress WooCommerce Point Of Sale (POS) <= 1.4 - SQL Injection VulnerabilityEPSS 0.3%