Vulnerabilidades en saadiqbal
52 resultadosAnálisis Vexday
Saadiqbal apresenta 46 vulnerabilidades catalogadas, com apenas 2 classificadas como críticas e nenhuma sob exploração ativa confirmada. A fraqueza dominante é CWE-862 (Autorização Ausente), indicando falhas no controle de acesso, enquanto o ritmo de descoberta permanece moderado com 5 vulnerabilidades nos últimos 90 dias.
CVE-2025-12362MEDIUMmyCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7 - Missing Authorization to Unauthenticated Withdrawal Request ApprovalEPSS 0.3%CVE-2024-13805MEDIUMAdvanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2026-8607MEDIUMmyCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrap' Shortcode AttributeEPSS 0.3%CVE-2026-7430MEDIUMPost Snippets <= 4.0.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via ImportEPSS 0.2%CVE-2025-12361MEDIUMmyCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program <= 2.9.7.1 - Missing Authorization to Sensitive Information ExposureEPSS 0.2%CVE-2025-9219MEDIUMPost SMTP <= 3.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Option UpdateEPSS 0.2%CVE-2025-12718MEDIUMQuick Contact Form <= 8.2.6 - Unauthenticated Open Mail RelayEPSS 0.2%CVE-2026-1674MEDIUMGutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.6.0 - Authenticated (Contributor+) Limited Options Update in save_gutena_forms_schema()EPSS 0.2%CVE-2026-3090HIGHPost SMTP <= 3.8.0 - Unauthenticated Stored Cross-Site Scripting via 'event_type'EPSS 0.2%CVE-2026-2559MEDIUMPost SMTP <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Office 365 OAuth Configuration OverwriteEPSS 0.2%CVE-2026-17149MEDIUMmyCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wrapper' Shortcode AttributeEPSS 0.2%CVE-2026-0550MEDIUMmyCred <= 2.9.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mycred_load_coupon' ShortcodeEPSS 0.2%