Vulnerabilities in wp-buy

25 results
Vexday analysis

O wp-buy apresenta um perfil de risco moderado com 20 CVEs catalogadas, sendo 2 críticas, mas nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-285, controle de acesso impróprio) é estrutural e requer atenção, embora a atividade recente seja baixa com apenas 1 vulnerabilidade publicada nos últimos 90 dias.

CVE-2025-32266MEDIUMWordPress 404 Image Redirection (Replace Broken Images) plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-52421HIGHWordPress WP Popup Window Maker plugin <= 2.0 - CSRF to Stored XSS vulnerabilityEPSS 0.2%CVE-2025-49284MEDIUMWordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-31570HIGHWordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerabilityEPSS 0.1%CVE-2025-31569HIGHWordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerabilityEPSS 0.1%