Vulnerabilidades em osamaesh
7 resultadosAnálise Vexday
O fornecedor osamaesh apresenta perfil de risco baixo com apenas 1 vulnerabilidade registrada na base, sem ataques ativos confirmados (KEV) e nenhuma classificação crítica. A fraqueza identificada é CWE-79 (Cross-site Scripting), de severidade moderada, sem detecção de exploração em campo nos últimos 90 dias.
CVE-2022-33965CRITICALWordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilitiesEPSS 4.4%CVE-2024-24867MEDIUMWordPress WP Stats Manager plugin <= 6.9.4 - Sensitive Data Exposure vulnerabilityEPSS 0.5%CVE-2026-116609MEDIUMWP Visitor Statistics (Real Time Traffic) <= 8.8 - Authenticated (Contributor+) SQL Injection via 'from' Shortcode AttributeEPSS 0.3%CVE-2026-96267HIGHWP Visitor Statistics (Real Time Traffic) <= 8.7 - Unauthenticated SQL Injection via 'fullRef' ParameterEPSS 0.3%CVE-2026-4303MEDIUMWP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode AttributeEPSS 0.3%CVE-2026-111370HIGHWP Visitor Statistics (Real Time Traffic) <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via 'os' / 'browser' / 'res' Tracker ParametersEPSS —CVE-2026-109230HIGHWP Visitor Statistics (Real Time Traffic) <= 8.7.1 - Unauthenticated Stored Cross-Site Scripting via 'browser' ParameterEPSS —