Vulnerabilidades en Tripetto
8 resultadosAnálisis Vexday
Tripetto apresenta footprint reduzido de 2 CVEs em base pública, nenhuma sob exploração ativa conhecida ou com severidade crítica. A fraqueza predominante (CWE-79, Cross-site Scripting) sugere exposição a vetores web tradicionais, mas ausência de publicações recentes indica estabilidade atual do código.
CVE-2021-36895MEDIUMWordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image uploadEPSS 0.7%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-13829MEDIUMWordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information ExposureEPSS 0.4%CVE-2025-22295HIGHWordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-10260HIGHTripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File UploadEPSS 0.3%CVE-2024-13497HIGHWordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2025-1530MEDIUMTripetto <= 8.0.9 - Cross-Site Request Forgery to Arbitrary Results DeletionEPSS 0.2%