Vulnerabilidades en wedevs
110 resultadosAnálisis Vexday
A WEDevs apresenta 50 vulnerabilidades catalogadas, com 13 descobertas nos últimos 90 dias, indicando atividade contínua. Nenhuma das vulnerabilidades está sob ataque ativo (KEV), e apenas 1 é classificada como crítica, reduzindo o risco imediato. A injeção SQL (CWE-89) é a fraqueza predominante, sugerindo falhas em validação de entrada que demandam remediação prioritária.
CVE-2026-2233MEDIUMUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' ParameterEPSS 0.2%CVE-2026-39520MEDIUMWordPress weDocs plugin <= 2.1.18 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24944MEDIUMWordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-32280MEDIUMWordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-4058MEDIUMUser Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack CancellationEPSS 0.2%CVE-2024-13436MEDIUMAppsero Helper <= 1.3.2 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.1%CVE-2022-47150MEDIUMWordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-95525MEDIUMWordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerabilityEPSS —CVE-2026-95523MEDIUMWordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerabilityEPSS —CVE-2026-95524MEDIUMWordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerabilityEPSS —