Vulnerabilidades em Astoundify
15 resultadosAnálise Vexday
Astoundify apresenta um perfil de risco moderado com 13 CVEs catalogadas, sendo 1 crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante é CWE-79 (Cross-site Scripting), indicando vulnerabilidades em validação de entrada que podem comprometer usuários finais. Apenas 1 CVE foi publicada nos últimos 90 dias, sugerindo que a maioria das exposições conhecidas é de histórico mais antigo, reduzindo a urgência imediata mas não eliminando a necessidade de remediação de técnicas XSS.
CVE-2024-52481HIGHWordPress Jobify theme < 4.3.0 - Unauthenticated Arbitrary File Read vulnerabilityEPSS 0.7%CVE-2024-32511CRITICALWordPress Simple Registration for WooCommerce plugin <= 1.5.6 - Unauthenticated Privilege Escalation vulnerabilityEPSS 0.5%CVE-2024-52480MEDIUMWordPress Jobify plugin < 4.3.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-31772MEDIUMWordPress WP Modal Popup with Cookie Integration plugin <= 2.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-13698MEDIUMJobify - Job Board WordPress Theme <= 4.2.7 - Missing Authorization to Unauthenticated Server-Side Request Forgery, Arbitrary Image Upload, and Image GenerationEPSS 0.3%CVE-2023-6978MEDIUMWP Job Manager – Company Profiles <= 1.7 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-52478MEDIUMWordPress Jobify theme < 4.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57336HIGHWordPress Jobify theme <= 4.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-54683MEDIUMWordPress WP Modal Popup with Cookie Integration Plugin plugin <= 2.4 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-67916HIGHWordPress Jobify theme <= 4.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-31031MEDIUMWordPress Job Colors for WP Job Manager plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-52479MEDIUMWordPress Jobify plugin < 4.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-12095HIGHSimple Registration for WooCommerce <= 1.5.8 - Cross-Site Request Forgery to Privilege Escalation via Role Request ApprovalEPSS 0.2%CVE-2026-28042HIGHWordPress Listify plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-59009MEDIUMWordPress Listify theme <= 3.2.5 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%