Vulnerabilidades em paoltaia

18 resultados
Análise Vexday

A Paoltaia apresenta um perfil de risco baixo com apenas 5 vulnerabilidades registradas e nenhuma sob exploração ativa conhecida. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, sem críticas severas identificadas. O risco atual é contido, com apenas 1 vulnerabilidade publicada nos últimos 90 dias.

CVE-2026-19091HIGHGeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion via 'post_type' Parameter via Query-String Bypass in geodir_save_post + geodir_delete_revisionEPSS 1.1%CVE-2026-104899HIGHGeoDirectory <= 2.8.187 - Unauthenticated Local File Inclusion via 'design_type' ParameterEPSS 0.6%CVE-2024-13507HIGHGeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Unauthenticated SQL InjectionEPSS 0.5%CVE-2024-13506MEDIUMGeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name ParameterEPSS 0.4%CVE-2026-118635MEDIUMGeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' ParameterEPSS 0.4%CVE-2026-103913HIGHGeoDirectory <= 2.8.186 - Unauthenticated SQL Injection via 'latitude' Parameter via Stored Pending ListingEPSS 0.4%CVE-2026-119113MEDIUMGeoDirectory <= 2.8.199 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' ParameterEPSS 0.4%CVE-2026-116752MEDIUMGeoDirectory <= 2.8.197 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_images' Image Title Delimiter InjectionEPSS 0.3%CVE-2024-3732MEDIUMGeoDirectory – WordPress Business Directory Plugin, or Classified Directory <= 2.3.48 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'gd_single_tabs' ShortcodeEPSS 0.3%CVE-2026-107754MEDIUMGeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Image TitleEPSS 0.3%CVE-2026-107650MEDIUMGeoDirectory <= 2.8.190 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Dynamic Content Field-Token Substitution via Listing TitleEPSS 0.3%CVE-2026-120082HIGHGeoDirectory <= 2.8.200 - Unauthenticated Stored Cross-Site Scripting via Nested '[gd_dynamic_content]' Shortcode in post_contentEPSS 0.2%CVE-2025-12833MEDIUMGeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.139 - Missing Authorization to Authenticated (Author+) Arbitrary Image AttachmentEPSS 0.2%CVE-2026-111069MEDIUMGeoDirectory <= 2.8.192 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'twitterusername' Custom FieldEPSS 0.2%CVE-2026-110703MEDIUMGeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url AttributeEPSS 0.2%CVE-2026-93897MEDIUMGeoDirectory <= 2.8.181 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Text-type Custom Field (e.g., 'phone')EPSS 0.2%CVE-2026-104993MEDIUMGeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom FieldEPSS 0.2%CVE-2026-96766MEDIUMGeoDirectory <= 2.8.183 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'business_hours' ParameterEPSS 0.2%