Vulnerabilidades em AdvancedCoding
10 resultadosAnálise Vexday
AdvancedCoding apresenta 4 vulnerabilidades registradas na base Vexday, nenhuma delas sob exploração ativa conhecida ou classificada como crítica. A fraqueza predominante é CWE-862 (controle de autorização inadequado), indicando problemas de gestão de permissões, embora sem publicações recentes nos últimos 90 dias, sugerindo risco contido no curto prazo.
CVE-2024-9488CRITICALComments – wpDiscuz <= 7.6.24 - Authentication Bypass via WordPress.com OAuth providerEPSS 0.8%CVE-2024-6704MEDIUMComments – wpDiscuz <= 7.6.21 - Unauthenticated HTML InjectionEPSS 0.6%CVE-2023-45760MEDIUMWordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-3869MEDIUMwpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/DecreaseEPSS 0.4%CVE-2023-3998MEDIUMwpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Post Rating Increase/DecreaseEPSS 0.4%CVE-2023-46309MEDIUMWordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-2477MEDIUMwpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative TextEPSS 0.3%CVE-2025-68997MEDIUMWordPress wpDiscuz plugin <= 7.6.43 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-9148HIGHComments <= 7.6.56 - Unauthenticated Stored Cross-Site Scripting via 'Website' FieldEPSS 0.3%CVE-2025-59591MEDIUMWordPress wpDiscuz Plugin <= 7.6.33 - Broken Access Control VulnerabilityEPSS 0.2%