Vulnerabilidades em scripteo
11 resultadosAnálise Vexday
Scripteo apresenta 11 vulnerabilidades catalogadas, com 1 classificada como crítica, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante é injeção SQL (CWE-89), risco clássico e bem conhecido em aplicações web. O portfólio de vulnerabilidades não apresenta atualizações recentes (nenhuma nos últimos 90 dias), sugerindo risco estabilizado, embora a presença de vulnerabilidades críticas exija mitigação conforme disponibilidade de patches.
CVE-2025-4380HIGHAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File InclusionEPSS 36.8%CVE-2024-13322HIGHAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.88 - Unauthenticated SQL InjectionEPSS 1.7%CVE-2025-46444HIGHWordPress Ads Pro plugin <= 4.89 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2025-4689CRITICALAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion to Remote Code ExecutionEPSS 0.5%CVE-2025-6437HIGHAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oidEPSS 0.3%CVE-2025-4381HIGHAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL InjectionEPSS 0.3%CVE-2025-5339HIGHAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Time-Based SQL Injection via ‘bsa_pro_id'EPSS 0.3%CVE-2025-7402HIGHAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.95 - Unauthenticated SQL Injection via site_idEPSS 0.3%CVE-2025-46464MEDIUMWordPress Ads Pro plugin <= 5.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25388MEDIUMWordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-6459HIGHAds Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Cross-Site Request Forgery to PHP Code Injection in bsaCreateAdTemplateEPSS 0.2%