Vulnerabilities in suiteplugins
5 resultsVexday analysis
A suiteplugins apresenta footprint reduzido com apenas 1 CVE registrada na base, sem incidentes sob ataque ativo no momento. A vulnerabilidade identificada é do tipo XSS (CWE-79), com baixa severidade e sem publicações recentes, indicando risco controlado no curto prazo.
CVE-2025-30890HIGHWordPress Login Widget for Ultimate Member plugin <= 1.1.2 - Local File Inclusion vulnerabilityEPSS 0.8%CVE-2024-54370CRITICALWordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.0 - Arbitrary File Upload vulnerabilityEPSS 0.7%CVE-2025-32121HIGHWordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.3 - SQL Injection vulnerabilityEPSS 0.6%CVE-2024-12162MEDIUMVideo & Photo Gallery for Ultimate Member <= 1.1.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2025-22672MEDIUMWordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.2 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%