Vulnerabilidades en WP Chill
40 resultadosAnálisis Vexday
WP Chill apresenta 33 vulnerabilidades catalogadas, com 5 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta. Nenhuma vulnerabilidade está sob ataque ativo conhecido (KEV) e não há críticas de CVSS máximo, reduzindo o risco imediato. A fraqueza dominante é insuficiência de controle de acesso (CWE-862), sugerindo problemas recorrentes na autorização de operações.
CVE-2026-81276MEDIUMWordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-27398MEDIUMWordPress RSVP and Event Management plugin <= 2.7.16 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39510LOWWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-27424MEDIUMWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-24957MEDIUMWordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39561MEDIUMWordPress Revive.so plugin <= 2.0.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-43329MEDIUMWordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43216MEDIUMWordPress Filr plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-65446HIGHWordPress Kali Forms plugin <= 2.4.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-25375MEDIUMWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-59551MEDIUMWordPress Revive.so Plugin <= 2.0.6 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-66448MEDIUMWordPress Gallery PhotoBlocks plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-84781MEDIUMWordPress Gallery PhotoBlocks plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-42688MEDIUMWordPress Modula Image Gallery plugin <= 2.14.23 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65475MEDIUMWordPress Modula Image Gallery plugin 2.14.25-2.14.30 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-57926MEDIUMWordPress Passster Plugin <= 4.2.18 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-58610MEDIUMWordPress Gallery PhotoBlocks Plugin <= 1.3.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-24939MEDIUMWordPress Modula Image Gallery plugin <= 2.13.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-23976MEDIUMWordPress Modula Image Gallery plugin <= 2.13.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24389MEDIUMWordPress Gallery PhotoBlocks plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%