Vulnerabilidades en designinvento
12 resultadosAnálisis Vexday
A designinvento apresenta um perfil de risco baixo com apenas 3 CVEs catalogadas e nenhuma sob exploração ativa. Nenhuma vulnerabilidade crítica foi identificada e não há registros de divulgação nos últimos 90 dias, indicando um ciclo de patching estabelecido. A fraqueza dominante (CWE-352 - Cross-Site Request Forgery) sugere exposição a ataques web, mas sem indicadores de exploração em larga escala no momento.
CVE-2023-37967MEDIUMWordPress DirectoryPress plugin <= 3.6.2 - Unauthenticated Broken Access Control VulnerabilityEPSS 0.7%CVE-2024-38755HIGHWordPress DirectoryPress plugin <= 3.6.10 - SQL Injection vulnerabilityEPSS 0.7%CVE-2026-3489HIGHDirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages'EPSS 0.4%CVE-2024-32567HIGHWordPress DirectoryPress plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-49633HIGHWordPress DirectoryPress plugin <= 3.6.19 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-10584MEDIUMDirectoryPress <= 3.6.16 - Authenticated (Author+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-27387MEDIUMWordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-23548MEDIUMWordPress DirectoryPress plugin <= 3.6.25 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-32249MEDIUMWordPress DirectoryPress Plugin <= 3.6.22 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-39566MEDIUMWordPress DirectoryPress plugin <= 3.6.26 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2024-10581MEDIUMDirectoryPress Frontend <= 2.7.9 - Cross-Site Request Forgery to Listing Status UpdateEPSS 0.2%CVE-2025-62967MEDIUMWordPress DirectoryPress plugin <= 3.6.25 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%