Exposição de Bootstrap

UI frameworks
61
score de exposição
2.371.189
sites usam
0
em exploração
1
críticos
Análise Vexday

Com 52 CVEs catalogadas e nenhuma em exploração ativa no catálogo CISA KEV, o Bootstrap apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere menor pressão ofensiva imediata sobre essa tecnologia. O tipo de falha mais comum é CWE-79 (Cross-Site Scripting), padrão esperado em frameworks de front-end e que exige atenção contínua na validação de entradas e saídas no contexto de aplicações web. A CVE mais perigosa identificada atualmente é CVE-2021-23472, com score EPSS de 0,0233, indicando probabilidade de exploração relativamente baixa no curto prazo. O surgimento de 2 novas CVEs nos últimos 90 dias sinaliza que a superfície de ataque ainda está em evolução, recomendando monitoramento contínuo e aplicação das atualizações disponíveis.

CVEs

58 resultados
CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2026-14635MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversalEPSS 0.4%CVE-2024-35169MEDIUMWordPress All Bootstrap Blocks plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-10329MEDIUMUltimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information ExposureEPSS 0.4%CVE-2026-4076MEDIUMSlider Bootstrap Carousel <= 1.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.4%CVE-2024-51810MEDIUMWordPress Lewe Bootstrap Visuals plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-51851MEDIUMWordPress best bootstrap widgets for elementor plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2023-52196HIGHWordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-30527MEDIUMWordPress My Bootstrap Menu plugin <= 1.2.1 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-14636MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Image Manager AddProduct.php do_upload_others_images path traversalEPSS 0.3%CVE-2024-11402HIGHWordPress Block Editor Bootstrap Blocks plugin <= 6.6.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-49677HIGHWordPress Bootstrap Buttons plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-2132MEDIUMUltimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image WidgetEPSS 0.3%CVE-2024-12495MEDIUMBootstrap Blocks for WP Editor v2 <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2023-47851MEDIUMWordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-1647MEDIUMXSS in Bootstrap title attribute for Tooltip and PopoverEPSS 0.3%CVE-2026-14634MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scriptingEPSS 0.3%CVE-2026-14633MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Hidden REST API Endpoint set cross site scriptingEPSS 0.3%CVE-2024-12722MEDIUMTwitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via ShortcodeEPSS 0.3%CVE-2025-22743MEDIUMWordPress Twitter Bootstrap Collapse aka Accordian Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%