Vulnerabilidades em XTemos
23 resultadosAnálise Vexday
O fornecedor XTemos tem 1 CVE na base do Vexday, classificada como crítica pelo CVSS e publicada nos últimos 90 dias, sem registro de exploração ativa no catálogo KEV. A fraqueza dominante é CWE-287 (autenticação inadequada), e o volume reduzido de registros limita a leitura de tendência. Por se tratar de uma vulnerabilidade crítica e recente, convém verificar a disponibilidade de correção e se os produtos afetados estão no inventário.
CVE-2023-32242CRITICALWordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object InjectionEPSS 0.8%CVE-2023-32244CRITICALWordPress Woodmart Core plugin <= 1.0.36 - Privilege EscalationEPSS 0.8%CVE-2026-89324CRITICALBasel Post Types <= 1.18 - Unauthenticated Authentication Bypass via Forged Opauth Callback Signature with Hardcoded Fallback SaltEPSS 0.7%CVE-2025-6746HIGHWoodMart <= 8.2.3 - Authenticated (Contributor+) Local File InclusionEPSS 0.6%CVE-2023-25790MEDIUMWordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes InjectionEPSS 0.5%CVE-2025-49935HIGHWordPress WoodMart theme < 8.3.2 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-6744HIGHWoodmart <= 8.2.3 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2023-41872HIGHWordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-12333MEDIUMWoodMart <= 8.0.3 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.4%CVE-2025-47600MEDIUMWordPress WoodMart theme <= 8.3.7 - Arbitrary Shortcode Execution vulnerabilityEPSS 0.4%CVE-2025-8097MEDIUMWoodMart - Multipurpose WooCommerce Theme <= 8.2.6 - Improper Input Validation Leading to Unauthenticated Cart ManipulationEPSS 0.4%CVE-2023-32239MEDIUMWordPress WoodMart Theme <= 7.2.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-39582HIGHWordPress Hitek theme < 1.8.3 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2023-32500MEDIUMWordPress WoodMart Theme <= 7.1.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-23971HIGHWordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-6745MEDIUMWoodMart <= 8.2.5 - Unauthenticated Post DisclosureEPSS 0.3%CVE-2023-32240MEDIUMWordPress Woodmart theme <= 7.2.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-32405MEDIUMWordPress WoodMart theme <= 8.3.9 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-67568MEDIUMWordPress Basel theme <= 5.9.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-56072HIGHWordPress WoodMart theme <= 8.5.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%