Vulnerabilidades en cmsmasters
7 resultadosAnálisis Vexday
A CMSMasters apresenta 6 vulnerabilidades catalogadas, todas com baixa criticidade (nenhuma crítica) e nenhuma sob exploração ativa conhecida. A fraqueza predominante é autorização inadequada (CWE-862), típica de plugins e temas para gerenciadores de conteúdo, sem novos problemas reportados nos últimos 90 dias, indicando risco estável e controlável.
CVE-2025-4414HIGHWordPress CMSMasters Content Composer plugin < 2.5.7 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-25326HIGHWordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-0952HIGHEco Nature - Environment & Ecology WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options UpdateEPSS 0.3%CVE-2024-7963MEDIUMCMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-9694MEDIUMCMSMasters Elementor Addon <= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.3%CVE-2025-0515MEDIUMBuzz Club – Night Club, DJ and Music Festival Event WordPress Theme <= 2.0.4 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Option UpdateEPSS 0.2%CVE-2026-23547HIGHWordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerabilityEPSS 0.2%