Vulnerabilidades en automattic
63 resultadosAnálisis Vexday
A Automattic tem 8 vulnerabilidades registradas na base do Vexday, sendo 1 crítica, todas sem exploração ativa conhecida (KEV). A fraqueza predominante é Cross-Site Scripting (CWE-79), indicando problemas de validação de entrada em aplicações web. Sem publicações de vulnerabilidades nos últimos 90 dias, o risco atual é estável e de baixa urgência operacional.
CVE-2023-50879MEDIUMWordPress WordPress.com Editing Toolkit Plugin <= 3.78784 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2023-50875MEDIUMWordPress Sensei LMS Plugin <= 4.17.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-56006MEDIUMWordPress Jetpack Debug Tools plugin < 2.0.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-7320MEDIUMWooCommerce <= 7.8.2 - Sensitive Information ExposureEPSS 0.3%CVE-2024-37476MEDIUMWordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-37474MEDIUMWordPress Newspack Ads plugin <= 1.47.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-22740MEDIUMWordPress Sensei LMS plugin <= 4.24.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-52222MEDIUMWordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-54332MEDIUMJetpack 11.4 - Cross Site Scripting (XSS)EPSS 0.3%CVE-2026-93485HIGHWordPress core <= 7.1 - Unauth. Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-47774MEDIUMWordPress Jetpack plugin < 12.7 - Auth. Iframe Injection vulnerabilityEPSS 0.3%CVE-2024-43949MEDIUMWordPress GHActivity plugin <= 2.0.0-alpha - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-34766MEDIUMWordPress ChaosTheory theme <= 1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-25404MEDIUMWordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-22155MEDIUMWordPress WooCommerce plugin <= 8.5.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-43338MEDIUMWordPress Crowdsignal Polls & Ratings plugin <= 3.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-26762MEDIUMWordPress WooCommerce plugin <= 9.7.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-37241MEDIUMWordPress WP Job Manager Resume Manager plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-37242MEDIUMWordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-3589HIGHWooCommerce < 10.5.3 - Arbitrary Admin User Creation via CSRFEPSS 0.2%