Vulnerabilities in loopus

15 results
Vexday analysis

A Loopus possui 12 vulnerabilidades catalogadas, das quais 2 são críticas, sem registros de exploração ativa até o momento. A fraqueza dominante (CWE-352 - Cross-Site Request Forgery) indica deficiências em validação de requisições, embora o baixo volume de descobertas recentes (1 CVE nos últimos 90 dias) sugira ritmo moderado de exposição de novos riscos.

CVE-2019-25296CRITICALWP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/DeleteEPSS 0.6%CVE-2019-25295MEDIUMWP Cost Estimation < 9.660 - Upload Directory TraversalEPSS 0.5%CVE-2024-30489HIGHWordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - SQL Injection vulnerabilityEPSS 0.5%CVE-2024-32509MEDIUMWordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.76 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-22715HIGHWordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Arbitrary Content Deletion vulnerabilityEPSS 0.4%CVE-2026-24363HIGHWordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-32510HIGHWordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-35737HIGHWordPress WP Visitors Tracker plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-60155MEDIUMWordPress WP Virtual Assistant Plugin <= 3.0 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2026-28115CRITICALWordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-22725HIGHWordPress WP Virtual Assistant plugin <= 3.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-9253HIGHWP Cost Estimation & Payment Forms Builder (E&P Forms) <= 10.5.97 - Unauthenticated Stored Cross-Site Scripting via 'customerInfos' ParameterEPSS 0.2%CVE-2025-31921MEDIUMWordPress WP Ultimate Tours Builder plugin <= 1.055 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-58956HIGHWordPress WP Attractive Donations System Plugin < 1.29 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%CVE-2025-58999MEDIUMWordPress WP Attractive Donations System - Easy Stripe & Paypal donations plugin <= 1.25 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%