Vulnerabilities in pluginever

4 results

Vexday analysis

PluginEver possui apenas 1 vulnerabilidade registrada na base, sem incidentes de exploração ativa (KEV) ou severidade crítica detectados. A fraqueza identificada é CWE-80 (Improper Neutralization of Script-Related HTML Tags), com idade superior a 90 dias, indicando risco baixo e estável no curto prazo.

CVE-2025-39364HIGHWordPress Product Category Slider for WooCommerce plugin <= 4.3.4 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2023-45053MEDIUMWordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerabilityEPSS 0.3%CVE-2023-46078MEDIUMWordPress Serial Numbers for WooCommerce – License Manager Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-64263MEDIUMWordPress WP Content Pilot plugin <= 2.1.7 - Broken Access Control vulnerabilityEPSS 0.2%