Vulnerabilities in kirilkirkov
8 resultsVexday analysis
O fornecedor kirilkirkov apresenta 8 vulnerabilidades catalogadas, das quais 6 foram divulgadas nos últimos 90 dias, indicando um padrão recente de descobertas. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e não há críticas de alta severidade, reduzindo significativamente o risco imediato. A fraqueza dominante é CWE-22 (path traversal), sugerindo deficiências em validação de caminhos de arquivo.
CVE-2024-7067MEDIUMkirilkirkov Ecommerce-Laravel-Bootstrap Cart.php getCartProductsIds deserializationEPSS 0.8%CVE-2026-14637HIGHkirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserializationEPSS 0.6%CVE-2026-14635MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversalEPSS 0.4%CVE-2026-14636MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversalEPSS 0.3%CVE-2026-1748MEDIUMInvoct – PDF Invoices & Billing for WooCommerce <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Information ExposureEPSS 0.3%CVE-2026-14634MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scriptingEPSS 0.3%CVE-2026-14633MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scriptingEPSS 0.3%CVE-2026-14632MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirectEPSS 0.3%