Vulnerabilities in trustindex
9 resultsVexday analysis
A TrustIndex apresenta um perfil de risco moderado com 8 vulnerabilidades catalogadas, nenhuma delas atualmente explorada em ataques conhecidos. A fraqueza dominante é XSS (CWE-79), tipicamente de menor severidade, porém o lançamento de 1 vulnerabilidade nos últimos 90 dias indica que a superfície de ataque permanece ativa. O risco é gerenciável desde que patches sejam aplicados regularmente, especialmente em aplicações expostas à internet.
CVE-2025-14726MEDIUMWidgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpointsEPSS 0.8%CVE-2025-12510HIGHWidgets for Google Reviews <= 13.2.4 - Unauthenticated Stored Cross-Site Scripting via Google ReviewsEPSS 0.4%CVE-2026-11591MEDIUMWidgets for Google Reviews <= 13.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fomo-title' and 'fomo-text' ParametersEPSS 0.3%CVE-2025-68595MEDIUMWordPress Widgets for Social Photo Feed plugin <= 1.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-5425HIGHWidgets for Social Photo Feed <= 1.7.9 - Unauthenticated Stored Cross-Site Scripting via feed_dataEPSS 0.2%CVE-2025-9436MEDIUMWidgets for Google Reviews <= 13.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via trustindex ShortcodeEPSS 0.2%CVE-2025-12123MEDIUMCustomer Reviews Collector for WooCommerce <= 4.6.1 - Reflected Cross-Site ScriptingEPSS 0.2%CVE-2023-3254MEDIUMWidgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings ResetEPSS 0.2%CVE-2025-8906MEDIUMWidgets for Tiktok Feed <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%