Vulnerabilities in wpshuffle
10 resultsVexday analysis
O WPShuffle apresenta um perfil de risco moderado com 10 vulnerabilidades catalogadas, sendo 1 crítica, porém nenhuma está sob exploração ativa confirmada. A ausência de divulgações recentes e de ataques registrados no KEV sugere que o risco não é imediato, mas a fraqueza dominante em controle de acesso (CWE-862) merece atenção em auditorias de permissões.
CVE-2025-60224CRITICALWordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2025-60153HIGHWordPress Subscribe To Unlock Plugin <= 1.1.5 - Local File Inclusion VulnerabilityEPSS 0.5%CVE-2025-60150HIGHWordPress Subscribe to Download plugin <= 2.0.9 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-1296MEDIUMFrontend Post Submission Manager Lite <= 1.2.7 - Unauthenticated Open Redirect via 'requested_page' ParameterEPSS 0.5%CVE-2024-8427MEDIUMFrontend Post Submission Manager Lite – Frontend Posting WordPress Plugin <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Settings UpdateEPSS 0.3%CVE-2025-14913MEDIUMFrontend Post Submission Manager Lite <= 1.2.6 - Incorrect Authorization to Unauthenticated Arbitrary Attachment DeletionEPSS 0.3%CVE-2025-14080MEDIUMFrontend Post Submission Manager Lite <= 1.2.5 - Missing Authorization to Unauthenticated Arbitrary Post ModificationEPSS 0.3%CVE-2025-60148MEDIUMWordPress Subscribe to Download plugin <= 2.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-60152MEDIUMWordPress Subscribe To Unlock Plugin <= 1.1.5 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-60166MEDIUMWordPress WP Subscription Forms PRO Plugin <= 2.0.5 - Arbitrary Content Deletion VulnerabilityEPSS 0.2%