Vulnerabilidades em Pluggabl

18 resultados
Análise Vexday

Pluggabl apresenta um portfólio reduzido de 5 vulnerabilidades, com apenas 1 crítica e nenhuma sob exploração ativa conhecida, reduzindo o risco imediato. A fraqueza dominante é Cross-Site Scripting (CWE-79), típica de aplicações web, que merece remediação sistemática. O ritmo de descoberta é moderado, com 1 CVE publicado nos últimos 90 dias, indicando um vendor com exposição limitada mas que requer monitoramento contínuo.

CVE-2024-1986HIGHElite Booster for WooCommerce <= 7.1.7 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 1.3%CVE-2024-3957MEDIUMBooster for WooCommerce <= 7.1.8 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.9%CVE-2024-13342HIGHBooster for WooCommerce <= 7.2.4 - Unauthenticated Double Extension Arbitrary File UploadEPSS 0.7%CVE-2023-4796MEDIUMBooster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via ShortcodeEPSS 0.7%CVE-2024-13744HIGHBooster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Arbitrary File UploadEPSS 0.7%CVE-2023-4945MEDIUMBooster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.6%CVE-2023-5638MEDIUMBooster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.5%CVE-2024-9170MEDIUMBooster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta ShortcodeEPSS 0.4%CVE-2024-9239MEDIUMBooster for WooCommerce <= 7.2.3 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-1054MEDIUMBooster for WooCommerce <= 7.1.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-12278HIGHBooster for WooCommerce <= 7.2.4 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-1534MEDIUMBooster for WooCommerce <= 7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortocdeEPSS 0.3%CVE-2026-56027CRITICALWordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerabilityEPSS 0.3%CVE-2024-13708HIGHBooster for WooCommerce 4.0.1 - 7.2.4 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-32586MEDIUMWordPress Booster for WooCommerce plugin < 7.11.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64379MEDIUMWordPress Booster for WooCommerce plugin <= 7.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-64196HIGHWordPress Booster for WooCommerce plugin <= 7.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64380MEDIUMWordPress Booster for WooCommerce plugin <= 7.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%