Vulnerabilidades em Wpsoul
30 resultadosAnálise Vexday
A Wpsoul apresenta um perfil de risco baixo com apenas 5 vulnerabilidades catalogadas, nenhuma em exploração ativa conhecida e sem críticas confirmadas. A fraqueza predominante é XSS (CWE-79), típica de aplicações web, sem atividade recente de divulgação que demande ação imediata.
CVE-2025-49301MEDIUMWordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-51926MEDIUMWordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-35765MEDIUMWordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-120520MEDIUMGreenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} ParameterEPSS 0.3%CVE-2026-2593MEDIUMGreenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-1927MEDIUMGreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_cssEPSS 0.2%CVE-2026-119218MEDIUMGreenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefixEPSS 0.2%CVE-2026-93880MEDIUMGreenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic PlaceholderEPSS 0.2%CVE-2025-57884MEDIUMWordPress Greenshift Plugin <= 12.1.1 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-11841MEDIUMGreenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data AttributesEPSS 0.2%