Vulnerabilidades em Select-Themes
36 resultadosAnálise Vexday
Select-Themes acumula 35 vulnerabilidades no histórico, com 3 de severidade crítica e 12 publicadas nos últimos 90 dias, indicando exposição contínua. Não há registros de exploração ativa em campo (KEV), o que reduz o risco imediato, mas a fraqueza dominante em CWE-98 (PHP Remote Code Execution) representa vetor de ataque estrutural que demanda atenção prioritária em processos de revisão de código.
CVE-2026-39547HIGHWordPress Getaway theme < 1.8 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-39553HIGHWordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-68068HIGHWordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-65477HIGHWordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-40752HIGHWordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-39567HIGHWordPress Santé theme <= 1.5.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-39560HIGHWordPress Hiroshi theme <= 1.5.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-57805HIGHWordPress Tonda theme <= 2.5 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2026-22447MEDIUMWordPress Prowess theme <= 1.8.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-34553HIGHWordPress Stockholm Core plugin <= 2.4.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-39580HIGHWordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-69029MEDIUMWordPress Struktur theme <= 2.5.1 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-67539MEDIUMWordPress Select Core plugin < 2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-22450MEDIUMWordPress Don Peppe theme <= 1.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-68077MEDIUMWordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-68076MEDIUMWordPress Stockholm Core plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%