Vulnerabilidades en cyberhobo
9 resultadosAnálisis Vexday
Cyberhobo apresenta 9 vulnerabilidades catalogadas, com 6 publicadas nos últimos 90 dias, indicando ritmo recente de descobertas. Nenhuma está sob ataque ativo (KEV) nem classificada como crítica, reduzindo a urgência imediata. A fraqueza dominante é injeção SQL (CWE-89), um vetor clássico que exige revisão do tratamento de entrada de dados.
CVE-2026-2416HIGHGeo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' ParameterEPSS 1.4%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-8990MEDIUMGeo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list ShortcodeEPSS 0.4%CVE-2026-6457MEDIUMGeo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' ParameterEPSS 0.4%CVE-2026-7552MEDIUMGeo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' ParameterEPSS 0.3%CVE-2026-4062HIGHGeo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' ParameterEPSS 0.3%CVE-2026-4061HIGHGeo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' ParameterEPSS 0.3%CVE-2026-4060HIGHGeo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' ParameterEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%