Vulnerabilidades em WPMU DEV - Your All-in-One WordPress Platform
13 resultadosAnálise Vexday
A WPMU DEV apresenta 13 vulnerabilidades catalogadas, com 2 divulgações recentes (últimos 90 dias), mas nenhuma sob exploração ativa conhecida ou com severity crítica. A fraqueza dominante (CWE-862 - Falta de autorização) sugere problemas de controle de acesso em seus produtos WordPress, exigindo vigilância quanto a possíveis contornos de permissões, embora o risco imediato seja moderado.
CVE-2024-43118MEDIUMWordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2024-37444MEDIUMWordPress Defender plugin <= 4.7.1 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-57815HIGHWordPress Forminator plugin <= 1.55.0.2 - Arbitrary File Download vulnerabilityEPSS 0.5%CVE-2024-29777HIGHWordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-22288MEDIUMWordPress Smush Image Compression and Optimization plugin <= 3.17.0 - Directory Traversal vulnerabilityEPSS 0.3%CVE-2024-32792MEDIUMWordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39466HIGHWordPress Broken Link Checker plugin <= 2.4.7 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-37239MEDIUMWordPress Branda plugin <= 3.4.17 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57814HIGHWordPress Forminator plugin <= 1.55.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-62048MEDIUMWordPress SmartCrawl plugin <= 3.14.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-43117MEDIUMWordPress Hummingbird plugin <= 3.9.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-24998MEDIUMWordPress Hustle plugin <= 7.8.9.2 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-32409MEDIUMWordPress Forminator plugin <= 1.50.2 - Broken Access Control vulnerabilityEPSS 0.2%