Vulnerabilidades en WP Wham
7 resultadosAnálisis Vexday
WP Wham apresenta uma base modesta de 7 vulnerabilidades, todas sem gravidade crítica e nenhuma sob exploração ativa conhecida, o que reduz significativamente o risco imediato. A fraqueza dominante é XSS (CWE-79), típica de plugins WordPress, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, indicando ritmo lento de descobertas recentes. O perfil de risco é baixo, mas recomenda-se acompanhamento contínuo das correções de XSS.
CVE-2022-29425MEDIUMWordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerabilityEPSS 0.7%CVE-2023-47660MEDIUMWordPress Product Visibility by Country for WooCommerce Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2025-39520MEDIUMWordPress Checkout Files Upload for WooCommerce plugin <= 2.2.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.4%CVE-2025-30917HIGHWordPress SKU Generator for WooCommerce plugin <= 1.6.2 - Reflected Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-32628HIGHWordPress Crowdfunding for WooCommerce Plugin <= 3.1.12 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-42725MEDIUMWordPress Checkout Files Upload for WooCommerce plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2025-30950MEDIUMWordPress All Currencies for WooCommerce plugin <= 2.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%