Vulnerabilities in labibahmed42
10 resultsVexday analysis
O fornecedor labibahmed42 apresenta um perfil de risco baixo com 10 CVEs catalogadas, nenhuma delas em exploração ativa conhecida. A ausência de vulnerabilidades críticas e de publicações recentes indica que o risco não é iminente, embora a fragilidade dominante seja CWE-79 (cross-site scripting), que merece atenção em futuras auditorias de código.
CVE-2024-13592HIGHTeam Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File InclusionEPSS 0.9%CVE-2021-4383HIGHWP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content InjectionEPSS 0.8%CVE-2021-4363MEDIUMWP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2021-4371MEDIUMWP Quick FrontEnd Editor <= 5.5 - Authenticated Settings ChangeEPSS 0.7%CVE-2021-4378MEDIUMWP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-13591MEDIUMTeam Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-10175MEDIUMPricing Tables For WPBakery Page Builder (formerly Visual Composer) <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via wdo_pricing_tables ShortcodeEPSS 0.3%CVE-2024-13687MEDIUMTeam Builder – Meet the Team <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Settings UpdateEPSS 0.3%CVE-2024-13582MEDIUMSimple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2024-13751MEDIUM3D Photo Gallery <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%