Vulnerabilidades em davidanderson

29 resultados
Análise Vexday

David Anderson registra 16 vulnerabilidades no histórico, com 5 publicadas nos últimos 90 dias, indicando atividade recente de descobertas. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e não há falhas críticas registradas, reduzindo o risco imediato. A fraqueza dominante é CWE-79 (Cross-Site Scripting), típica de aplicações web, exigindo validação rigorosa de entrada.

CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2026-103997MEDIUMRedux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via /wp-admin/profile.php inline redux_<opt_name> JavaScriptEPSS 0.3%CVE-2026-100316HIGHEuropean VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry HeaderEPSS 0.3%CVE-2026-110534MEDIUMRedux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Scheme NameEPSS 0.3%CVE-2023-5982MEDIUMUpdraftPlus <= 1.23.10 - Cross-Site Request Forgery to Google Drive Storage UpdateEPSS 0.3%CVE-2026-104812MEDIUMRedux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array KeyEPSS 0.2%CVE-2026-90992MEDIUMRedux Framework <= 4.5.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'user-mediaurl' Media FieldEPSS 0.2%CVE-2025-14123MEDIUMRedux Framework <= 4.5.11 – Authenticated (Subscriber+) Privilege Escalation via Users ExtensionEPSS 0.2%CVE-2026-7660MEDIUMEasy Updates Manager <= 9.0.20 - Reflected Cross-Site Scripting via 'paged' ParameterEPSS 0.2%