Vulnerabilidades em Mojoomla
31 resultadosAnálise Vexday
Mojoomla apresenta 7 vulnerabilidades registradas, com 2 classificadas como críticas e 3 publicadas nos últimos 90 dias, indicando atividade recente de descoberta. A fraqueza dominante é injeção SQL (CWE-89), um vetor de alto risco para comprometimento de dados. Não há evidência de exploração ativa em campanha (KEV=0), mas a recência e severidade das falhas exigem atenção prioritária em processos de patch.
CVE-2025-39357HIGHWordPress Hospital Management System plugin <= 47.0(20-11-2023) - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-32303CRITICALWordPress WPCHURCH plugin <= 2.7.0 - SQL Injection VulnerabilityEPSS 0.2%CVE-2025-47613HIGHWordPress School Management System for Wordpress plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-15656HIGHWordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerabilityEPSS 0.2%CVE-2025-15655HIGHWordPress School Management plugin <= 93.2.0 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-15657MEDIUMWordPress School Management plugin <= 93.1.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-48108MEDIUMWordPress School Management Plugin <= 93.2.0 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-24774HIGHWordPress WPCRM - CRM for Contact form CF7 & WooCommerce plugin <= 3.2.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-47574HIGHWordPress School Management System Plugin <= 92.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39393HIGHWordPress Hospital Management System plugin <= 47.0(20-11-2023) - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39392HIGHWordPress WPAMS plugin <= 44.0 (17-08-2023) - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%