Vulnerabilidades em netweblogic
19 resultadosAnálise Vexday
NetWebLogic apresenta 13 vulnerabilidades catalogadas, nenhuma atualmente sob exploração ativa (KEV) e sem críticas de CVSS registradas. A fraqueza predominante é CWE-79 (Cross-site Scripting), indicando risco moderado focado em injeção de código client-side; o fato de não haver publicações recentes (últimos 90 dias) sugere que o risco é estável e não há desenvolvimento novo de ameaças.
CVE-2025-6970HIGHEvents Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` ParameterEPSS 65.3%CVE-2018-0576—Cross-site scripting vulnerability in Events Manager plugin prior to version 5.9 for WordPress allows remote attackers to inject arbitrary wEPSS 1.5%CVE-2024-1770HIGHMeta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object InjectionEPSS 0.8%CVE-2026-14280MEDIUMEvents Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array KeysEPSS 0.7%CVE-2024-0614MEDIUMEvents Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settingsEPSS 0.7%CVE-2024-11260HIGHEvents Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status ParameterEPSS 0.6%CVE-2026-15023MEDIUMEvents Manager <= 7.4.0 - Authenticated (Contributor+) SQL Injection via 'meta_key' Parameter in Event/Location Duplicate ActionEPSS 0.4%CVE-2025-12976MEDIUMEvents Manager <= 7.2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'events_list_grouped' ShortcodeEPSS 0.4%CVE-2024-2111MEDIUMEvents Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-10627MEDIUMEvents Manager <= 7.4.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'status', 'private', and 'private_only' ParametersEPSS 0.3%CVE-2025-12408MEDIUMEvents Manager <= 7.2.2.2 - Unauthenticated Information ExposureEPSS 0.3%CVE-2024-5889MEDIUMEvents Manager <= 6.4.8 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-3492MEDIUMEvents Manager – Calendar, Bookings, Tickets, and more! <= 6.4.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via event, location, and event_category ShortcodesEPSS 0.3%CVE-2026-17089MEDIUMEvents Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' ParameterEPSS 0.3%CVE-2025-6975MEDIUMEvent Manager <= 7.0.3 - Reflected Cross-Site Scripting via `calendar_header` ParameterEPSS 0.3%CVE-2025-6976MEDIUMEvents Manager <= 7.0.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Plugin ShortcodesEPSS 0.2%CVE-2025-14945MEDIUMEvents Manager - Calendar, Bookings, Tickets, and more! <= 7.3.3 - Unauthenticated Stored Cross-Site Scripting via Event AttributesEPSS 0.2%CVE-2024-2110MEDIUMEvents Manager <= 6.4.7.1 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-12407MEDIUMEvents Manager – Calendar, Bookings, Tickets, and more! <= 7.2.2.2 - Cross-Site Request Forgery to Location DeletionEPSS 0.1%