Vulnerabilidades en WPDeveloper

53 resultados
Análisis Vexday

Com 51 CVEs catalogadas e nenhuma entrada no catálogo KEV da CISA, o WPDeveloper apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que não elimina riscos relevantes. O tipo de falha mais recorrente é CWE-862 (autorização ausente), padrão que indica deficiências estruturais nos controles de acesso dos plugins desenvolvidos pelo vendor. A CVE mais perigosa no momento é CVE-2023-32243, com score EPSS de 0,7595 — valor elevado que sugere alta probabilidade de exploração — e a existência de pelo menos um PoC público reforça a necessidade de atenção imediata a essa vulnerabilidade. As 4 CVEs surgidas nos últimos 90 dias indicam ritmo contínuo de descobertas, demandando monitoramento ativo por parte de equipes que utilizam produtos desse vendor em ambientes WordPress.

CVE-2023-32243CRITICALWordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege EscalationEPSS 75.5%CVE-2024-47308MEDIUMWordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerabilityEPSS 1.7%CVE-2025-24752HIGHWordPress Essential Addons for Elementor plugin <= 6.0.14 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 1.2%CVE-2024-30226CRITICALWordPress BetterDocs plugin <= 3.3.3 - Unauthenticated PHP Object Injection vulnerabilityEPSS 0.9%CVE-2022-46809MEDIUMWordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV InjectionEPSS 0.8%CVE-2023-41955HIGHWordPress Essential Addons for Elementor plugin <= 5.8.8 - Contributor+ Privilege Escalation vulnerabilityEPSS 0.6%CVE-2024-32717MEDIUMWordPress SchedulePress plugin <= 5.0.8 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-51359MEDIUMWordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-51360MEDIUMWordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerabilityEPSS 0.6%CVE-2024-43129MEDIUMWordPress BetterDocs plugin <= 3.5.8 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-43328HIGHWordPress EmbedPress plugin <= 4.0.9 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-49408CRITICALWordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure VulnerabilityEPSS 0.5%CVE-2024-51672HIGHWordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerabilityEPSS 0.5%CVE-2022-47594MEDIUMWordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access ControlEPSS 0.4%CVE-2024-30467MEDIUMWordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-38707MEDIUMWordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-31284MEDIUMWordPress EmbedPress plugin <= 3.9.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-47760MEDIUMWordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-26871MEDIUMWordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-39589MEDIUMWordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure VulnerabilityEPSS 0.4%