Vulnerabilidades em gVectors Team

32 resultados
Análise Vexday

gVectors Team apresenta 32 vulnerabilidades catalogadas, predominantemente relacionadas a Cross-Site Scripting (CWE-79), com apenas 1 crítica em severidade. Nenhuma vulnerabilidade está sob ataque ativo (KEV) e não há registros de publicações nos últimos 90 dias, indicando um panorama de risco estável e sem pressão exploratória imediata.

CVE-2022-38055MEDIUMWordPress wpForo Forum plugin <= 2.0.9 - Auth. HTML Injection vulnerabilityEPSS 0.3%CVE-2023-49759MEDIUMWordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-28555MEDIUMwpForo Forum 2.4.14 Missing Authorization via Topic Close AJAX HandlerEPSS 0.3%CVE-2026-28554MEDIUMwpForo Forum 2.4.14 Missing Authorization via Post Approval AJAX HandlerEPSS 0.3%CVE-2023-47870HIGHWordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2024-35681MEDIUMWordPress wpDiscuz plugin <= 7.6.18 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-47775MEDIUMWordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2022-40632MEDIUMWordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.3%CVE-2026-28560MEDIUMwpForo Forum 2.4.14 Stored XSS via Unsafe JSON Encoding in Inline ScriptEPSS 0.2%CVE-2026-28561MEDIUMwpForo Forum 2.4.14 Stored XSS via Unescaped Forum Description in TemplatesEPSS 0.2%CVE-2026-28556MEDIUMwpForo Forum 2.4.14 Missing Authorization via Topic Management Form HandlersEPSS 0.2%CVE-2026-28558MEDIUMwpForo Forum 2.4.14 Stored XSS via SVG Avatar File UploadEPSS 0.2%