Vulnerabilidades en WesternDeal

12 resultados
Análisis Vexday

WesternDeal apresenta um perfil de risco contido com 6 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa conhecida. A vulnerabilidade crítica (1) relaciona-se principalmente a controle de acesso inadequado (CWE-862), porém o risco não é imediato visto que não há publicações recentes e nenhuma das falhas está sendo explorada em operações reais.

CVE-2025-8593HIGHGSheetConnector For Gravity Forms <= 1.3.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin InstallationEPSS 0.4%CVE-2024-1562MEDIUMWooCommerce Google Sheet Connector <= 1.3.11 - Missing AuthorizationEPSS 0.4%CVE-2025-22686MEDIUMWordPress CF7 Google Sheets Connector plugin <= 5.0.17 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-67979CRITICALWordPress WPForms Google Sheet Connector plugin <= 4.0.1 - Remote Code Execution (RCE) vulnerabilityEPSS 0.4%CVE-2025-30592MEDIUMWordPress Advanced Dewplayer - plugin <= 1.6 Broken Access Control VulnerabilityEPSS 0.4%CVE-2024-5654MEDIUMCF7 Google Sheets Connector <= 5.0.9 - Missing Authorization to Limited Site Configuration UpdateEPSS 0.4%CVE-2025-22752HIGHWordPress GSheetConnector for Forminator Forms Plugin <= 1.0.12 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-16614MEDIUMGSheetConnector <= 5.2.1 - Authenticated (Administrator+) SQL Injection via 's' ParameterEPSS 0.3%CVE-2025-67570MEDIUMWordPress WPForms Google Sheet Connector plugin <= 4.0.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-13136MEDIUMGSheetConnector For Ninja Forms <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) System Information ExposureEPSS 0.2%CVE-2025-8606LOWGSheetConnector For Gravity Forms <= 1.3.23 - Cross-Site Request Forgery to Arbitrary Plugin Activation/DeactivationEPSS 0.2%CVE-2025-54030MEDIUMWordPress WooCommerce Google Sheet Connector plugin <= 1.3.20 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%