Vulnerabilidades en wedevs
130 resultadosCVE-2024-34442MEDIUMWordPress weDocs plugin <= 2.1.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-30896MEDIUMWordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-96343HIGHWordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-12729MEDIUMweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Data Migration via wedocs_migrate_betterdocs_to_wedocs AJAX ActionEPSS 0.4%CVE-2025-14574MEDIUMweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information ExposureEPSS 0.4%CVE-2026-66466HIGHWordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-39377HIGHWordPress Appsero Helper plugin <= 1.3.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-59522MEDIUMWordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-25468MEDIUMWordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-95523MEDIUMWordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2026-57334MEDIUMWordPress WP User Frontend plugin <= 4.3.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-12734MEDIUMweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'connectorWidth' Block AttributeEPSS 0.3%CVE-2026-12731MEDIUMweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sectionTitleTag' and 'articleTitleTag' Block AttributesEPSS 0.3%CVE-2026-95524MEDIUMWordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerabilityEPSS 0.3%CVE-2026-24364MEDIUMWordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-28989MEDIUMWordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-31917HIGHWordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-10520MEDIUMWP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/DeletionEPSS 0.3%CVE-2025-2541MEDIUMWP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2025-14348MEDIUMweMail <= 2.0.7 - Insufficient Authorization via x-wemail-user Header to Sensitive Information DisclosureEPSS 0.3%