Vulnerabilidades em NooTheme
32 resultadosAnálise Vexday
NooTheme apresenta um portfólio de 29 vulnerabilidades com 4 classificadas como críticas, mas nenhuma sob exploração ativa conhecida (KEV), o que reduz o risco imediato. A fraqueza dominante é cross-site scripting (CWE-79), típica de plataformas web, e o ritmo recente é baixo com apenas 1 CVE publicado nos últimos 90 dias, sugerindo um risco estável e não emergente.
CVE-2022-45828MEDIUMWordPress NOO Timetable Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-24977HIGHWordPress Organici Library plugin <= 2.1.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-57888MEDIUMWordPress Jobmonster Theme <= 4.8.0 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2026-24973HIGHWordPress CitiLights theme <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54737HIGHWordPress Jobmonster theme <= 4.7.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54718HIGHWordPress Yogi - Health Beauty & Yoga theme <= 2.9.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-53585HIGHWordPress WeMusic theme <= 1.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57368HIGHWordPress Jobmonster theme <= 4.8.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24975HIGHWordPress Organici Library plugin <= 2.1.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24979HIGHWordPress Jobica Core plugin <= 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24980HIGHWordPress Visionary Core plugin <= 1.4.9 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-57887MEDIUMWordPress Jobmonster Theme <= 4.8.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%