Vulnerabilidades em PenciDesign

33 resultados
Análise Vexday

PenciDesign apresenta um perfil de risco moderado com 28 vulnerabilidades catalogadas, porém nenhuma sob exploração ativa no momento. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, com apenas 1 vulnerabilidade crítica identificada. A ausência de publicações recentes (últimos 90 dias) sugere que o risco atual está estabilizado, mas a prevalência de XSS requer atenção contínua em validação de entrada e sanitização de dados.

CVE-2025-8143MEDIUMSoledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'EPSS 0.2%CVE-2026-27054HIGHWordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-59585MEDIUMWordPress Penci Recipe Plugin <= 4.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-59584MEDIUMWordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-59589MEDIUMWordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-59583MEDIUMWordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-59586MEDIUMWordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-59587MEDIUMWordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-24354MEDIUMWordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-27057MEDIUMWordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-27059MEDIUMWordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-27069MEDIUMWordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-27058MEDIUMWordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%