Vulnerabilidades em Repute Infosystems
27 resultadosAnálise Vexday
Repute Infosystems apresenta 16 vulnerabilidades catalogadas, com 4 em nível crítico, mas nenhuma sob exploração ativa conhecida. A fraqueza predominante é desserialização insegura (CWE-502), padrão estrutural que requer correção em profundidade; apenas 2 CVEs foram publicadas nos últimos 90 dias, sugerindo risco estável e sem escalação recente.
CVE-2026-6960CRITICALBookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom FieldEPSS 0.7%CVE-2023-51405HIGHWordPress BookingPress plugin <= 1.0.74 - Booking Price Manipulation vulnerabilityEPSS 0.7%CVE-2024-30223CRITICALWordPress ARMember plugin <= 4.0.26 - Unauthenticated PHP Object Injection vulnerabilityEPSS 0.6%CVE-2022-46808HIGHWordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL InjectionEPSS 0.6%CVE-2023-36507MEDIUMWordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data ExposureEPSS 0.6%CVE-2024-30222HIGHWordPress ARMember plugin <= 4.0.26 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2024-32948CRITICALWordPress ARMember – Membership Plugin plugin <= 4.0.28 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-51356HIGHWordPress ARMember plugin <= 4.0.10 - Privilege Escalation vulnerabilityEPSS 0.6%CVE-2023-50841HIGHWordPress BookingPress Plugin <= 1.0.72 is vulnerable to SQL InjectionEPSS 0.5%CVE-2022-45838MEDIUMWordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2022-47421MEDIUMWordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-47837HIGHWordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerabilityEPSS 0.4%CVE-2022-47140HIGHWordPress ARMember Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-33323MEDIUMWordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-34799MEDIUMWordPress BookingPress plugin <= 1.0.82 - Appointment Duration Manipulation vulnerabilityEPSS 0.4%CVE-2024-31270HIGHWordPress ARForms Form Builder plugin <= 1.6.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-27995MEDIUMWordPress ARMember plugin <= 4.0.23 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-37920HIGHWordPress ARForms Form Builder plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-31296MEDIUMWordPress BookingPress plugin <= 1.0.81 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-11823HIGHBookingPress Appointment Booking Pro <= 5.7.1 - Unauthenticated SQL Injection via 'store_service_date' ParameterEPSS 0.3%