Vulnerabilidades en RealMag777
125 resultadosAnálisis Vexday
RealMag777 apresenta 36 vulnerabilidades catalogadas, com 9 divulgações nos últimos 90 dias, indicando atividade recente de descobertas; embora nenhuma esteja sob exploração ativa conhecida (KEV), 6 são classificadas como críticas e o padrão dominante aponta para falhas de validação de entrada (CWE-79), típicas de impacto elevado em contextos web.
CVE-2026-39574CRITICALWordPress InPost Gallery plugin <= 2.1.4.6 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-42727CRITICALWordPress Active Products Tables for WooCommerce plugin <= 1.0.8 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-42755CRITICALWordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-66436CRITICALWordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-42761CRITICALWordPress Active Products Tables for WooCommerce plugin <= 1.0.9 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-52732HIGHWordPress Google Map Targeting Plugin <= 1.1.6 - Local File Inclusion VulnerabilityEPSS 0.4%CVE-2024-32691MEDIUMWordPress Active Products Tables for WooCommerce plugin <= 1.0.6.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-57889HIGHWordPress InPost Gallery Plugin <= 2.1.4.5 - Local File Inclusion VulnerabilityEPSS 0.4%CVE-2026-32458HIGHWordPress WOLF plugin <= 1.0.8.7 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-45213HIGHWordPress BEAR plugin <= 1.1.7.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-39497HIGHWordPress FOX plugin <= 1.4.5 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-24835MEDIUMWordPress BEAR plugin <= 1.1.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-30200HIGHWordPress BEAR plugin <= 1.1.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-9241MEDIUMFOX – Currency Switcher Professional for WooCommerce <= 1.4.6 - Authenticated (Subscriber+) Authorization Bypass via User-Controlled Key to 'wooc_order_user_roles' ParameterEPSS 0.4%CVE-2023-2558MEDIUMWPCS – WordPress Currency Switcher Professional <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2025-1514HIGHActive Products Tables for WooCommerce <= 1.0.6.7 - Unauthenticated Arbitrary Filter CallEPSS 0.4%CVE-2024-30463MEDIUMWordPress BEAR plugin <= 1.1.4.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-29932MEDIUMWordPress WordPress Meta Data and Taxonomies Filter (MDTF) plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-3513MEDIUMTableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode AttributeEPSS 0.3%CVE-2024-1796MEDIUMHUSKY – Products Filter for WooCommerce Professional <= 1.3.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%