Vulnerabilidades em devsoftbaltic
10 resultadosAnálise Vexday
A DevSoftBaltic apresenta 10 vulnerabilidades catalogadas, com 1 classificada como crítica, mas nenhuma sob exploração ativa conhecida no momento. A ausência de divulgações recentes (0 nos últimos 90 dias) sugere que o risco está estabilizado, com a fraqueza dominante em CSRF (CWE-352) representando a exposição principal do fornecedor.
CVE-2024-50427CRITICALWordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2024-12544HIGHSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFileEPSS 0.8%CVE-2025-32167MEDIUMWordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-32256MEDIUMWordPress SurveyJS plugin <= 1.12.20 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-3815MEDIUMSurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterEPSS 0.3%CVE-2026-2440HIGHSurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-13140MEDIUMSurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey DeletionEPSS 0.1%CVE-2025-13194MEDIUMSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey RenamingEPSS 0.1%CVE-2025-13205MEDIUMSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey CloningEPSS 0.1%CVE-2025-13139MEDIUMSurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey CreationEPSS 0.1%