Vulnerabilidades en weDevs
110 resultadosAnálisis Vexday
weDevs acumula 44 vulnerabilidades no histórico, com 6 divulgadas nos últimos 90 dias, indicando desenvolvimento contínuo de riscos. Nenhuma vulnerabilidade crítica foi registrada e não há evidência de exploração ativa em ambientes capturados, reduzindo a urgência imediata. A fraqueza predominante é controle de acesso inadequado (CWE-862), sugerindo problemas estruturais de autorização que merecem atenção em avaliações de segurança.
CVE-2024-43238HIGHWordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-2541MEDIUMWP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2026-5459MEDIUMUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription OverwriteEPSS 0.3%CVE-2025-63008MEDIUMWordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-13921MEDIUMweDocs <= 2.1.16 - Missing Authorization to Authenticated (Subscriber+) Documentation Post UpdateEPSS 0.3%CVE-2023-3407MEDIUMSubscribe2 <= 10.40 - Cross-Site Request ForgeryEPSS 0.3%CVE-2025-58269MEDIUMWordPress WP Project Manager Plugin <= 2.6.25 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2025-3100MEDIUMWP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2025-8994MEDIUMWP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator'EPSS 0.3%CVE-2024-37946MEDIUMWordPress ReCaptcha Integration for WordPress plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-14339MEDIUMweMail <= 2.0.7 - Missing Authorization to Unauthenticated Form DeletionEPSS 0.3%CVE-2025-58672MEDIUMWordPress WP User Frontend Plugin <= 4.1.12 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2026-4058MEDIUMUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack CancellationEPSS 0.3%CVE-2025-22649MEDIUMWordPress WP Project Manager plugin <= 2.6.22 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-39520MEDIUMWordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-68040MEDIUMWordPress WP Project Manager plugin <= 3.0.1 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-67546MEDIUMWordPress WP ERP plugin <= 1.16.6 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-57322HIGHWordPress weMail plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-73393HIGHWordPress Subscribe2 plugin <= 10.46 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-65492HIGHWordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%