Vulnerabilidades em seventhqueen
11 resultadosAnálise Vexday
A seventhqueen apresenta um perfil de risco baixo com apenas 2 CVEs catalogadas e nenhuma sob exploração ativa. As vulnerabilidades identificadas estão associadas a controle de acesso (CWE-639), sem críticas CVSS, e não há registros recentes de divulgação nos últimos 90 dias, sugerindo que o risco atual é estável e gerenciável.
CVE-2024-43222CRITICALWordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerabilityEPSS 0.8%CVE-2024-56000CRITICALWordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerabilityEPSS 0.5%CVE-2025-64363HIGHWordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-27417CRITICALWordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2024-12102MEDIUMTyper Core <= 1.9.6 - Authenticated (Contributor+) Post DisclosureEPSS 0.3%CVE-2024-56209HIGHWordPress Kleo theme < 5.4.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-39367MEDIUMWordPress Kleo theme < 5.4.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-12391MEDIUMRestrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status UpdateEPSS 0.3%CVE-2026-22465HIGHWordPress BuddyApp theme <= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-69140HIGHWordPress SweetDate Core plugin < 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64362MEDIUMWordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%