Vulnerabilidades en themefic
50 resultadosAnálisis Vexday
Themefic apresenta 12 vulnerabilidades catalogadas sem exploração ativa documentada, com apenas 2 divulgações recentes nos últimos 90 dias indicando ritmo controlado de descobertas. A ausência de vulnerabilidades críticas e de ataques em curso reduz a urgência imediata, mas a fraqueza dominante em controle de autorização (CWE-639) merece revisão da postura de acesso nos componentes afetados.
CVE-2024-32433MEDIUMWordPress BEAF plugin <= 4.5.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-28188HIGHWordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-15948MEDIUMHydra Booking <= 1.2.2 - Authenticated (Host+) Stored Cross-Site Scripting via 'first_name' ParameterEPSS 0.2%CVE-2026-24940MEDIUMWordPress Travelfic Toolkit plugin <= 1.3.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-8319MEDIUMTourfic <= 2.11.20 - Cross-Site Request Forgery in Multiple FunctionsEPSS 0.2%CVE-2026-42675HIGHWordPress Hydra Booking plugin <= 1.1.41 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39541MEDIUMWordPress Hydra Booking plugin <= 1.1.38 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-12801MEDIUMUltra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider AttributesEPSS 0.2%CVE-2026-65439HIGHWordPress Ultimate Addons for Contact Form 7 plugin <=3.5.45 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-32460MEDIUMWordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.36 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%