Vulnerabilities in wp-buy

24 results
Vexday analysis

O wp-buy apresenta um perfil de risco moderado com 20 CVEs catalogadas, sendo 2 críticas, mas nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-285, controle de acesso impróprio) é estrutural e requer atenção, embora a atividade recente seja baixa com apenas 1 vulnerabilidade publicada nos últimos 90 dias.

CVE-2026-52702HIGHWordPress SEO Redirection plugin <= 9.17 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-49284MEDIUMWordPress WP Maintenance Mode & Site Under Construction plugin <= 4.3 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%CVE-2025-31570HIGHWordPress Related Posts Widget with Thumbnails plugin <= 1.2 - CSRF to Stored XSS vulnerabilityEPSS 0.1%CVE-2025-31569HIGHWordPress wordpress related Posts with thumbnails plugin <= 3.0.0.1 - CSRF to Stored XSS vulnerabilityEPSS 0.1%