Vulnerabilidades em appsbd
12 resultadosAnálise Vexday
AppsBD apresenta um portfólio reduzido de 10 vulnerabilidades sem exploração ativa detectada, mas com 1 crítica registrada que requer atenção. A fraqueza dominante (CWE-862 - falta de autorização) sugere falhas em controle de acesso, risco estrutural que pode afetar múltiplos componentes. O ritmo de descobertas é moderado, com apenas 1 CVE nos últimos 90 dias, indicando risco controlado mas não negligenciável.
CVE-2025-13156HIGHVitepos – Point of Sale (POS) for WooCommerce <= 3.3.0 - Authenticated (Subscriber+) Arbitrary File Upload to Remote Code ExecutionEPSS 0.7%CVE-2025-39535HIGHWordPress Vitepos plugin <= 3.1.7 - Broken Authentication VulnerabilityEPSS 0.5%CVE-2025-22277HIGHWordPress Vitepos plugin <= 3.1.4 - Broken Authentication vulnerabilityEPSS 0.5%CVE-2024-33574MEDIUMWordPress Vitepos plugin <= 3.0.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2023-47694MEDIUMWordPress Mini Cart Drawer For WooCommerce plugin <= 4.0.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-54241MEDIUMWordPress Elite Notification plugin 1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-54242MEDIUMWordPress Simple Notification plugin <= 1.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-26750MEDIUMWordPress Vitepos Plugin <= 3.1.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-32642CRITICALWordPress Vite Coupon plugin <= 1.0.9 - CSRF to Remote Code Execution (RCE) vulnerabilityEPSS 0.3%CVE-2026-54841HIGHWordPress Vitepos plugin <= 3.4.2 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-57385HIGHWordPress Vitepos plugin <= 3.4.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-13866MEDIUMSimple Notification <= 1.3 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.2%