Vulnerabilities in yonifre
11 resultsVexday analysis
Yonifre apresenta 10 vulnerabilidades conhecidas na base, nenhuma sob exploração ativa identificada até o momento. A fraqueza dominante é Cross-site Scripting (CWE-79), típica de aplicações web, sem casos críticos registrados e sem novas descobertas nos últimos 90 dias, indicando um risco estável e de baixa urgência operacional.
CVE-2025-1039HIGHLenix Elementor Leads addon <= 1.8.2 - Unauthenticated Stored Cross-Site Scripting via URL Form FieldEPSS 0.4%CVE-2024-25101MEDIUMWordPress Maspik – Spam blacklist Plugin <= 0.10.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-48272HIGHWordPress Maspik – Spam blacklist Plugin <= 0.9.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-53806MEDIUMWordPress Maspik plugin <= 2.2.7 - CSRF to Settings Change vulnerabilityEPSS 0.4%CVE-2023-48271MEDIUMWordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerabilityEPSS 0.4%CVE-2023-24008MEDIUMWordPress Maspik – Spam blacklist Plugin <= 0.7.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-9979MEDIUMMaspik <= 2.5.6 - Authenticated (Subscriber+) Missing Authorization to Spam Log ExportEPSS 0.2%CVE-2025-60144MEDIUMWordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-28003HIGHWordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-9888MEDIUMMaspik <= 2.5.6 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-60145MEDIUMWordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%