Vulnerabilidades em strangerstudios
11 resultadosAnálise Vexday
Stranger Studios apresenta footprint modesto de 10 CVEs sem exploração ativa registrada, reduzindo o risco imediato. A fraqueza dominante é CWE-352 (Cross-Site Request Forgery), um vetor clássico de baixa severidade em componentes web. Apenas 1 vulnerabilidade foi publicada nos últimos 90 dias, indicando ritmo lento de descobertas e ausência de críticas (CVSS 9+), sugerindo exposição controlada.
CVE-2023-6187HIGHPaid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 51.3%CVE-2024-0624MEDIUMPaid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders UpdateEPSS 1.0%CVE-2024-0588MEDIUMPaid Memberships Pro <= 2.12.10 - Cross-Site Request ForgeryEPSS 0.9%CVE-2023-6855MEDIUMPaid Memberships Pro <= 2.12.5 - Missing Authorization via APIEPSS 0.5%CVE-2024-11227MEDIUMMemberlite Shortcodes <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via memberlite_accordion ShortcodeEPSS 0.5%CVE-2020-36754MEDIUMPaid Memberships Pro <= 2.4.2 - Cross-Site Request Forgery BypassEPSS 0.4%CVE-2024-3215MEDIUMPaid Memberships Pro <= 3.0.1 - Cross-Site Request ForgeryEPSS 0.3%CVE-2025-10125MEDIUMMemberlite Shortcodes <= 1.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-4100HIGHPaid Memberships Pro <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Stripe Webhook Deletion and Payment Processing DisruptionEPSS 0.2%CVE-2024-1407MEDIUMPaid Memberships Pro <= 2.12.10 - Cross-Site Request Forgery to Membership ModificationEPSS 0.2%CVE-2026-15016MEDIUMPaid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions <= 3.8.1 - Authenticated (Subscriber+) Stored Cross-Site ScriptingEPSS 0.2%