Vulnerabilidades en legalweb
7 resultadosAnálisis Vexday
LegalWeb apresenta footprint de risco reduzido com 7 CVEs no histórico, nenhuma sob exploração ativa conforme rastreamento do CISA. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, com apenas 1 crítica catalogada e atividade de disclosure concentrada nos últimos 90 dias, sugerindo risco atual controlado.
CVE-2021-42359HIGHWP DSGVO Tools (GDPR) <= 3.1.23 Unauthenticated Arbitrary Post DeletionEPSS 3.9%CVE-2021-4358HIGHWP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.8%CVE-2026-10034MEDIUMWP DSGVO Tools (GDPR) <= 3.1.39 - Missing Authorization to Unauthenticated Sensitive Personal Data Disclosure via subject-access-request AJAX Endpoint (process_now/is_ajax Parameters)EPSS 0.6%CVE-2026-4283CRITICALWP DSGVO Tools (GDPR) <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin UsersEPSS 0.4%CVE-2024-11761MEDIUMLegalWeb Cloud <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-3201MEDIUMWP DSGVO Tools (GDPR) <= 3.1.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2026-0914MEDIUMWP DSGVO Tools (GDPR) <= 3.1.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lw_content_block' ShortcodeEPSS 0.3%