Vulnerabilidades en Pagup
10 resultadosAnálisis Vexday
Pagup possui 4 vulnerabilidades catalogadas, nenhuma em exploração ativa ou crítica segundo a base Vexday, com a fraqueza dominante sendo Cross-Site Scripting (CWE-79). O perfil de risco é estável, sem publicações recentes que indiquem descobertas novas, embora o foco em vulnerabilidades de injeção XSS demande atenção a boas práticas de sanitização de entrada.
CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-11009MEDIUMInternal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id ParameterEPSS 0.4%CVE-2025-30799MEDIUMWordPress WP Google Street View plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2024-50415MEDIUMWordPress Ads.txt & App-ads.txt Manager for WordPress plugin <= 1.1.7.1 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-13542MEDIUMWP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2023-25706MEDIUMWordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-0563MEDIUMWP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' ShortcodeEPSS 0.2%CVE-2025-15019MEDIUMBIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-62921MEDIUMWordPress Bulk Auto Image Title Attribute plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%