Vulnerabilities in totalsoft
10 resultsVexday analysis
A TotalSoft apresenta um perfil de risco baixo com 8 vulnerabilidades registradas, nenhuma delas crítica ou sob ataque ativo no momento. A fraqueza predominante é injeção SQL (CWE-89), típica de aplicações web, sem novos registros nos últimos 90 dias, indicando um panorama estável e não emergencial.
CVE-2024-9022HIGHTS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.0 - Authenticated (Administrator+) SQL Injection via orderby ParameterEPSS 1.0%CVE-2022-38067MEDIUMWordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerabilityEPSS 0.6%CVE-2022-36390MEDIUMWordPress Event Calendar – Calendar plugin <= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2024-10247HIGHYouTube Gallery and Vimeo Gallery Plugin <= 2.4.2 - Authenticated (Administrator+) SQL InjectionEPSS 0.5%CVE-2025-3470MEDIUMTS Poll – Survey, Versus Poll, Image Poll, Video Poll <= 2.4.6 - Authenticated (Administrator+) SQL Injection via 's' ParameterEPSS 0.4%CVE-2024-9769MEDIUMVideo Gallery <= 2.4.1 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-62098MEDIUMWordPress Portfolio Gallery plugin <= 1.4.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-22632HIGHWordPress WooCommerce Pricing – Product Pricing plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68588MEDIUMWordPress TS Poll plugin <= 2.5.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25428MEDIUMWordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%