Vulnerabilidades em AmauriC
13 resultadosAnálise Vexday
AmauriC apresenta footprint reduzido com 6 CVEs catalogadas e nenhuma sob exploração ativa conhecida, reduzindo o risco imediato de ataque. Nenhuma vulnerabilidade crítica foi identificada, porém 1 disclosure nos últimos 90 dias indica atividade recente que merece monitoramento contínuo. A fraqueza dominante CWE-1021 (improper restriction of rendered UI layers) sugere problemas em isolamento de componentes que podem ter impacto em segurança de camadas de interface.
CVE-2024-13888HIGHWPMobile.App <= 11.56 - Open Redirect via 'redirect' ParameterEPSS 0.8%CVE-2023-3620MEDIUMCross-site Scripting (XSS) - Stored in amauric/tarteaucitron.jsEPSS 0.5%CVE-2026-94541CRITICALWPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' ParameterEPSS 0.5%CVE-2024-12420MEDIUMWPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.4%CVE-2025-31476MEDIUMtarteaucitron.js allows url scheme injection via unfiltered inputsEPSS 0.4%CVE-2026-49977MEDIUMtarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookiesEPSS 0.4%CVE-2025-31475MEDIUMtarteaucitron.js allows prototype pollution via custom text injectionEPSS 0.4%CVE-2025-31138MEDIUMtarteaucitron.js allows UI manipulation via unrestricted CSS injectionEPSS 0.3%CVE-2026-103421MEDIUMWPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path SegmentEPSS 0.2%CVE-2026-111714LOWtarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purgeEPSS 0.2%CVE-2025-48939MEDIUMtarteaucitron.js vulnerable to DOM Clobbering via document.currentScriptEPSS 0.2%CVE-2026-111713MEDIUMtarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation MismatchEPSS 0.2%CVE-2026-22809MEDIUMtarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilityEPSS 0.1%