Vulnerabilidades em expresstech

51 resultados
Análise Vexday

ExpressTech registra 14 vulnerabilidades no histórico, com 1 crítica e 4 publicadas nos últimos 90 dias, indicando risco moderado em evolução. Embora nenhuma esteja sob ataque ativo no momento, a fraqueza dominante em injeção SQL (CWE-89) representa um vetor clássico e de alto impacto que requer atenção imediata em aplicações expostas à internet.

CVE-2026-104392HIGHWordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-9637MEDIUMQuiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response UploadsEPSS 0.3%CVE-2025-9318MEDIUMQuiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query ParameterEPSS 0.3%CVE-2026-96558HIGHQuiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' ParameterEPSS 0.2%CVE-2025-9294MEDIUMQuiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results DeletionEPSS 0.2%CVE-2023-51521MEDIUMWordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-48867HIGHWordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-40787HIGHWordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-107862MEDIUMWordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-97289HIGHWordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-104391MEDIUMWordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%