Vulnerabilidades em revmakx
18 resultadosAnálise Vexday
RevmakX apresenta um portfólio moderado de 13 vulnerabilidades com apenas 1 crítica e nenhuma sob ataque ativo no momento, reduzindo a pressão imediata de remediação. A fraqueza dominante é CWE-862 (controle de acesso inadequado), padrão estrutural que requer atenção em futuras atualizações. Dois problemas publicados nos últimos 90 dias indicam atividade recente, exigindo monitoramento contínuo mas não situação de emergência.
CVE-2024-8856CRITICALBackup and Staging by WP Time Capsule <= 1.22.21 - Unauthenticated Arbitrary File UploadEPSS 94.0%CVE-2023-2916HIGHInfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information ExposureEPSS 24.0%CVE-2026-1499HIGHWP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX ActionEPSS 1.0%CVE-2024-10585MEDIUMInfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File ReadingEPSS 0.7%CVE-2023-6565MEDIUMInfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information ExposureEPSS 0.6%CVE-2024-38770CRITICALWordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation VulnerabilityEPSS 0.5%CVE-2024-49684HIGHWordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2026-42760HIGHWordPress Backup and Staging by WP Time Capsule plugin <= 1.22.25 - Broken Authentication vulnerabilityEPSS 0.5%CVE-2024-48020HIGHWordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerabilityEPSS 0.5%CVE-2026-8996MEDIUMBackup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc FunctionEPSS 0.5%CVE-2025-24652MEDIUMWordPress WP Duplicate plugin <= 1.1.6 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-74011HIGHWordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-22280HIGHWordPress DefendWP Firewall Plugin <= 1.1.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-47477HIGHWordPress Backup and Staging by WP Time Capsule plugin <= 1.22.23 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-17576MEDIUMInfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array KeyEPSS 0.3%CVE-2025-66103MEDIUMWordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-34816MEDIUMWordPress WPCal.io plugin <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-32795MEDIUMWordPress WPCal.io <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%