Vulnerabilities in perfmatters
8 resultsVexday analysis
Perfmatters apresenta um perfil de risco baixo com apenas 3 vulnerabilidades registradas, nenhuma em exploração ativa (KEV). A fraqueza dominante é CWE-22 (path traversal), sem críticas severas. O risco atual é reduzido, embora uma vulnerabilidade tenha sido publicada nos últimos 90 dias, recomendando monitoramento contínuo.
CVE-2026-13251HIGHPerfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' ParameterEPSS 0.9%CVE-2026-4350HIGHPerfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' ParameterEPSS 0.7%CVE-2023-47876HIGHWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-47874MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2026-4351HIGHPerfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' ParameterEPSS 0.4%CVE-2023-47877MEDIUMWordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-57671HIGHWordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-47875MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%