Vulnerabilities in themetechmount
11 resultsVexday analysis
ThemeTechMount apresenta 8 CVEs catalogadas, com 3 classificadas como críticas e 4 publicadas nos últimos 90 dias, indicando pressão contínua de novos achados. Nenhuma vulnerabilidade está sob exploração ativa registrada (KEV), reduzindo o risco imediato. A fraqueza dominante é controle de acesso inadequado (CWE-862), padrão que sugere falhas estruturais na autorização e requer revisão arquitetural dos componentes afetados.
CVE-2026-13161HIGHTrueBooker <= 1.2.2 - Unauthenticated SQL InjectionEPSS 0.5%CVE-2026-32400HIGHWordPress Boldman theme <= 7.7 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-61951CRITICALWordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-14365CRITICALTrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'EPSS 0.3%CVE-2026-14364CRITICALTrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'EPSS 0.3%CVE-2026-61950CRITICALWordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-48881CRITICALWordPress TrueBooker plugin <= 1.1.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39663MEDIUMWordPress TrueBooker plugin <= 1.1.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-1797MEDIUMTruebooker - Appointment Booking and Scheduler Plugin <= 1.1.4 - Sensitive Information Exposure via Views FilesEPSS 0.2%CVE-2025-67581MEDIUMWordPress TrueBooker plugin <= 1.1.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-47543MEDIUMWordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%