Vulnerabilidades en WPManageNinja
14 resultadosAnálisis Vexday
WPManageNinja apresenta 5 vulnerabilidades registradas, com 4 delas publicadas nos últimos 90 dias, indicando atividade recente de descoberta de falhas. Nenhuma está sob exploração ativa (KEV) e não há críticas pelo CVSS, reduzindo a urgência imediata. A fraqueza dominante é XSS (CWE-79), típica de plugins WordPress, exigindo atenção em validação de entrada mas sem indicadores de risco crítico no curto prazo.
CVE-2023-6953MEDIUMPDF Generator For Fluent Forms <= 1.1.7 - Cross-Site ScriptingEPSS 0.4%CVE-2026-17567MEDIUMFluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' ParameterEPSS 0.4%CVE-2025-13495MEDIUMFluentCart A New Era of eCommerce <= 1.3.1 - Authenticated (Administrator+) SQL Injection via 'groupKey' ParameterEPSS 0.3%CVE-2026-16636HIGHFluentSMTP <= 2.2.95 - Unauthenticated Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email LogsEPSS 0.3%CVE-2026-16655HIGHFluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` MemberEPSS 0.3%CVE-2026-42655HIGHWordPress Best Payments Plugin for WP plugin <= 4.6.19 - Payment Bypass vulnerabilityEPSS 0.2%CVE-2026-65474MEDIUMWordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-67971HIGHWordPress FluentCart plugin < 1.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-17571MEDIUMFluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'EPSS 0.2%CVE-2026-15665MEDIUMFluent Support <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'redirect-to' Shortcode AttributeEPSS 0.2%CVE-2026-61964HIGHWordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57715HIGHWordPress Fluent CRM plugin <= 3.1.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-5069MEDIUMFluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'EPSS 0.2%CVE-2026-65470MEDIUMWordPress Fluent Support plugin <= 2.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%