Vulnerabilidades en levelfourstorefront
13 resultadosAnálisis Vexday
A Level Four Storefront apresenta 11 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa e sem registros críticos. A fraqueza predominante é CWE-352 (Cross-Site Request Forgery), indicando risco moderado em controles de autenticação. Com zero publicações nos últimos 90 dias, o perfil de risco permanece estável, sugerindo que as vulnerabilidades não são recentes.
CVE-2023-3023HIGHWP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'EPSS 0.7%CVE-2024-3211HIGHShopping Cart & eCommerce Store <= 5.6.3 - Authenticated (Contributor+) SQL InjectionEPSS 0.6%CVE-2024-7827HIGHShopping Cart & eCommerce Store <= 5.7.2 - Authenticated (Contributor+) SQL Injection via model_number ParameterEPSS 0.5%CVE-2024-4213MEDIUMShopping Cart & eCommerce Store <= 5.6.4 - Sensitive Information ExposureEPSS 0.5%CVE-2026-17553HIGHShopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX ActionEPSS 0.4%CVE-2024-12712MEDIUMShopping Cart & eCommerce Store <= 5.7.8 - Missing Authorization to Order UpdatesEPSS 0.3%CVE-2026-17589MEDIUMShopping Cart & eCommerce Store <= 5.9.2 - Authenticated (Administrator+) SQL Injection via 'product_order' ParameterEPSS 0.3%CVE-2023-2891MEDIUMWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_delete_productEPSS 0.2%CVE-2023-2894MEDIUMWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_deactivate_productEPSS 0.2%CVE-2023-2896MEDIUMWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_duplicate_productEPSS 0.2%CVE-2023-2893MEDIUMWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_deactivate_productEPSS 0.2%CVE-2023-2895MEDIUMWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_activate_productEPSS 0.2%CVE-2023-2892MEDIUMWP EasyCart <= 5.4.8 - Cross-Site Request Forgery via process_bulk_delete_productEPSS 0.2%