Vulnerabilidades em Webkul

52 resultados
Análise Vexday

Webkul registra 11 vulnerabilidades no histórico, com 3 divulgações nos últimos 90 dias, indicando atividade moderada de descobertas. Nenhuma vulnerabilidade está sob ataque ativo (KEV), reduzindo o risco imediato, embora 2 sejam críticas; a fraqueza dominante é XSS (CWE-79), típica de aplicações web e potencialmente explorada em massa. O fornecedor requer monitoramento contínuo, mas não apresenta urgência crítica no momento.

CVE-2026-19836MEDIUMWebkul Bagisto Backend Customer Detail Feature view authorizationEPSS 0.4%CVE-2026-19994MEDIUMWebkul Bagisto Configuration Management execute authorizationEPSS 0.4%CVE-2026-19996MEDIUMWebkul Bagisto Backend Customer Behavior Data Endpoint customers privileges managementEPSS 0.4%CVE-2026-75081MEDIUMWebkul Bagisto store behavioral workflowEPSS 0.4%CVE-2026-19993MEDIUMWebkul Bagisto RMA State Validation update-status behavioral workflowEPSS 0.4%CVE-2026-110218MEDIUMAureus ERP through 1.6.0 Unpublished Blog Post Disclosure via Direct URLEPSS 0.4%CVE-2026-60120MEDIUMBagisto < 2.4.4 Stored XSS via CSTI in create.blade.phpEPSS 0.4%CVE-2025-10759MEDIUMWebkul QloApps CSRF Token authorizationEPSS 0.3%CVE-2026-107702MEDIUMQloApps through 1.7.0 Authorization Bypass via id_hotel in Admin Room BookingEPSS 0.3%CVE-2026-19995MEDIUMWebkul Bagisto RMA Message send-message cross site scriptingEPSS 0.3%CVE-2025-1074MEDIUMWebkul QloApps URL mylogout cross-site request forgeryEPSS 0.3%CVE-2026-94387MEDIUMAureus ERP before 1.6.0 Stored XSS via Chatter Field-Change LogEPSS 0.3%CVE-2026-101139MEDIUMWebkul Bagisto Invoice Mass Status Update state authorizationEPSS 0.3%CVE-2026-92234MEDIUMQloApps through 1.7.0 Reflected XSS via Hotel Feature Validation ErrorsEPSS 0.3%CVE-2026-112190MEDIUMWebkul Aureus ERP composer.json insertion of sensitive information into debugging codeEPSS 0.3%CVE-2026-93454MEDIUMAureus ERP through 1.6.0 Stored XSS via Payment Term NoteEPSS 0.3%CVE-2026-89268MEDIUMQloApps through 1.7.0 Reflected XSS via List Filter ParametersEPSS 0.3%CVE-2026-110219MEDIUMQloApps through 1.7.0 Reflected XSS via Additional Facility Price FieldEPSS 0.3%CVE-2026-105836MEDIUMQloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRoomsEPSS 0.3%CVE-2026-110224MEDIUMQloApps through 1.7.0 Reflected XSS via Search Alias Validation ErrorsEPSS 0.3%