Vulnerabilidades em Contempoinc
9 resultadosAnálise Vexday
Contempoinc apresenta footprint reduzido de 4 CVEs na base, sem incidentes de exploração ativa registrados. Dois casos foram divulgados nos últimos 90 dias, concentrados em vulnerabilidades de injeção (CWE-79), indicando risco moderado e localizado que merece monitoramento rotineiro mas não constitui ameaça iminente.
CVE-2021-24387—Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)EPSS 3.7%CVE-2024-13421CRITICALReal Estate 7 WordPress <= 3.5.1 - Unauthenticated Privilege Escalation to AdministratorEPSS 0.7%CVE-2025-2891HIGHWP Pro Real Estate 7 <= 3.5.4 - Authenticated (Custom) Arbitrary File UploadEPSS 0.7%CVE-2022-47146HIGHWordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2025-39459HIGHWordPress Real Estate 7 theme <= 3.5.2 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-2906MEDIUMContempo Real Estate Core <= 3.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2026-54827CRITICALWordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-57343HIGHWordPress Real Estate 7 theme <= 3.5.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57641MEDIUMWordPress Real Estate 7 theme <= 3.5.9 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%