Vulnerabilidades em Mojoomla
31 resultadosAnálise Vexday
Mojoomla apresenta 7 vulnerabilidades registradas, com 2 classificadas como críticas e 3 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. A fraqueza dominante é injeção SQL (CWE-89), um vetor de alto risco para comprometimento de dados. Não há evidência de exploração ativa em campanha (KEV=0), mas a recência e severidade das falhas exigem atenção prioritária em processos de patch.
CVE-2025-47572HIGHWordPress School Management <= 93.0.0 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2025-32549HIGHWordPress WPGYM <= 65.0 - Local File Inclusion VulnerabilityEPSS 0.6%CVE-2025-39401CRITICALWordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-39406CRITICALWordPress WPAMS plugin <= 44.0 - Local File Inclusion to Privilege Escalation vulnerabilityEPSS 0.5%CVE-2025-32304HIGHWordPress WPCHURCH plugin <= 2.7.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-32643CRITICALWordPress WPGYM Plugin <= 65.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-39380CRITICALWordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-47573CRITICALWordPress School Management System Plugin <= 92.0.0 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-39402CRITICALWordPress WPAMS plugin <= 44.0 (17-08-2023) - Arbitrary File Upload vulnerabilityEPSS 0.4%CVE-2025-31100CRITICALWordPress School Management Plugin <= 1.93.1 (02-07-2025) - Arbitrary File Upload VulnerabilityEPSS 0.4%CVE-2026-39433MEDIUMWordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion vulnerabilityEPSS 0.4%CVE-2025-47663CRITICALWordPress Hospital Management System plugin <= 47.0(20-11-2023) - Arbitrary File Upload vulnerabilityEPSS 0.3%CVE-2025-24773CRITICALWordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-32574HIGHWordPress WPGYM plugin <= 65.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-39405HIGHWordPress WPAMS plugin <= 44.0 (17-08-2023) - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-39395CRITICALWordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-39386CRITICALWordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-47631HIGHWordPress Hospital Management System plugin <= 47.0(20-11-2023) - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-39403HIGHWordPress WPAMS plugin <= 44.0 (17-08-2023) - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-39357HIGHWordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerabilityEPSS 0.3%