Vulnerabilidades em cifi
9 resultadosAnálise Vexday
A CIFI apresenta um perfil de risco moderado com 9 vulnerabilidades catalogadas, predominantemente relacionadas a Cross-Site Scripting (CWE-79), embora nenhuma esteja sob ataque ativo no momento. Dos números reportados, 2 vulnerabilidades foram publicadas nos últimos 90 dias, indicando descobertas recentes, e a ausência de vulnerabilidades críticas (CVSS 9.0-10.0) reduz a urgência imediata, mas não elimina a necessidade de monitoramento contínuo do fornecedor.
CVE-2024-6497HIGHSEO Plugin by Squirrly SEO <= 12.3.19 - Authenticated (Contributor+) SQL Injection via url ParameterEPSS 11.0%CVE-2024-0366MEDIUMStarbox – the Author Box for Humans <= 3.4.7 - Insecure Direct Object ReferenceEPSS 0.6%CVE-2025-1768MEDIUMSEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subscriber+) SQL Injection via search ParameterEPSS 0.5%CVE-2024-0597MEDIUMSEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settingsEPSS 0.5%CVE-2023-6806MEDIUMStarbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job SettingsEPSS 0.4%CVE-2024-0256MEDIUMStarbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social SettingsEPSS 0.3%CVE-2026-7624MEDIUMSEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorization to Authenticated (Contributor+) Privileged Cloud API OperationsEPSS 0.3%CVE-2025-14342MEDIUMSEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorization to Authenticated (Subscriber+) Cloud Service DisconnectionEPSS 0.3%CVE-2026-1667HIGHSEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creation and Stored Cross-Site Scripting via savePost()EPSS 0.2%