Vulnerabilidades em CedCommerce
8 resultadosAnálise Vexday
CedCommerce apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada na base, sem indicadores de exploração ativa ou severidade crítica. A fraqueza identificada é Cross-Site Scripting (CWE-79), vetor comum de baixa exploração em plataformas e-commerce, com data de publicação anterior aos últimos 90 dias.
CVE-2025-39384HIGHWordPress Product Lister for eBay plugin <= 2.0.9 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2025-31773MEDIUMWordPress Ship Per Product plugin <= 2.1.0 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-47646MEDIUMWordPress Recently viewed and most viewed products Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2025-68877HIGHWordPress CedCommerce Integration for Good Market plugin <= 1.0.6 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2024-5641MEDIUMOne Click Order Re-Order <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-57945MEDIUMWordPress WP Advanced PDF Plugin <= 1.1.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2026-14279HIGHWholesale Market <= 2.2.2 - Authenticated (Subscriber+) Privilege Escalation via 'role_required' ParameterEPSS 0.3%CVE-2025-62138MEDIUMWordPress WP Advanced PDF plugin <= 1.1.7 - Other vulnerability Type vulnerabilityEPSS 0.2%