Vulnerabilidades em themepoints
19 resultadosAnálise Vexday
ThemePoints apresenta 6 vulnerabilidades catalogadas, todas relacionadas a Cross-Site Scripting (CWE-79), sem qualquer registro de exploração ativa em campo. Nenhuma vulnerabilidade crítica foi identificada e não há descobertas recentes nos últimos 90 dias, indicando um perfil de risco baixo e estável. A fraqueza predominante em validação de entrada sugere atenção ao ciclo de desenvolvimento, mas sem pressão imediata de remediação.
CVE-2023-5667MEDIUMTab Ultimate <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.5%CVE-2023-5666MEDIUMAccordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.5%CVE-2023-5613MEDIUMSuper Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2021-36858MEDIUMWordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2023-5639MEDIUMTeam Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2023-47809MEDIUMWordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-31348MEDIUMWordPress Super Testimonials plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-13704HIGHSuper Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-12699MEDIUMService Box <= 1.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-43959HIGHWordPress Super Testimonials plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-47497MEDIUMWordPress Logo Showcase plugin <= 3.0.4 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-58820MEDIUMWordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-22805MEDIUMWordPress Skill Bar Plugin <= 1.2 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58684MEDIUMWordPress Logo Showcase plugin <= 4.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66471MEDIUMWordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58652MEDIUMWordPress Carousel Ultimate Plugin <= 1.8 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-69350MEDIUMWordPress Accordion plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-62060MEDIUMWordPress Tab Ultimate plugin <= 1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-69335MEDIUMWordPress Team Showcase plugin <= 2.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%