Vulnerabilidades em sevenspark
12 resultadosAnálise Vexday
Sevenspark possui 8 vulnerabilidades catalogadas, predominantemente falhas de injeção XSS (CWE-79), porém sem incidentes de exploração ativa documentados e nenhuma crítica em severidade. O risco é baixo no curto prazo, já que não há descobertas recentes e a exposição atual não está sendo explorada em operações de ciberataques.
CVE-2025-13146MEDIUMContact Form 7 – Dynamic Text Extension <= 5.0.7 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2020-36746MEDIUMMenu Swapper <= 1.1.0.2 - Cross-Site Request Forgery BypassEPSS 0.5%CVE-2023-5164MEDIUMBellows Accordion Menu <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2024-10084MEDIUMContact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via ShortcodeEPSS 0.4%CVE-2023-6630MEDIUMContact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object ReferenceEPSS 0.3%CVE-2026-5116MEDIUMContact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-63068MEDIUMWordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerabilityEPSS 0.3%CVE-2024-4710MEDIUMUber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple ShortcodesEPSS 0.3%CVE-2025-49243MEDIUMWordPress ShiftNav – Responsive Mobile Menu plugin <= 1.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-49242MEDIUMWordPress Bellows Accordion Menu plugin <= 1.4.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-3593HIGHUberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings ResetEPSS 0.2%CVE-2024-56218MEDIUMWordPress Contact Form 7 - Dynamic Text Extension plugin <= 5.0.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%