Vulnerabilidades em WP OnlineSupport, Essential Plugin
12 resultadosAnálise Vexday
O WP OnlineSupport Essential Plugin apresenta 12 vulnerabilidades catalogadas, porém nenhuma sob exploração ativa conhecida e sem críticas identificadas. A fraqueza dominante é CWE-862 (controle de acesso inadequado), padrão em plugins WordPress, mas a ausência de atualizações recentes sugere que o risco está estabilizado sem novas exposições emergentes.
CVE-2023-25060MEDIUMWordPress Album and Image Gallery plus Lightbox plugin <= 1.6.2 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2023-25703MEDIUMWordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-43232HIGHWordPress Timeline and History slider plugin <= 2.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2023-39996MEDIUMWordPress Accordion and Accordion Slider plugin <= 1.2.4 - Broken Access ControlEPSS 0.5%CVE-2022-46846MEDIUMWordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-48273MEDIUMWordPress Preloader for Website plugin <= 1.2.2 - Unauthenticated Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-39995MEDIUMWordPress Portfolio and Projects plugin <= 1.3.7 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-30488MEDIUMWordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-32601MEDIUMWordPress Popup Anything plugin <= 2.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-38516MEDIUMWordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2022-45818MEDIUMWordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2022-38077MEDIUMWordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%