Vulnerabilidades em weDevs
100 resultadosAnálise Vexday
weDevs acumula 44 vulnerabilidades no histórico, com 6 divulgadas nos últimos 90 dias, indicando desenvolvimento contínuo de riscos. Nenhuma vulnerabilidade crítica foi registrada e não há evidência de exploração ativa em ambientes capturados, reduzindo a urgência imediata. A fraqueza predominante é controle de acesso inadequado (CWE-862), sugerindo problemas estruturais de autorização que merecem atenção em avaliações de segurança.
CVE-2024-47640HIGHWordPress WP ERP plugin <= 1.13.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-30896MEDIUMWordPress WP ERP plugin <= 1.13.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-25468MEDIUMWordPress Happy Addons for Elementor plugin <= 3.20.8 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-14574MEDIUMweDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot <= 2.1.15 - Unauthenticated Sensitive Information ExposureEPSS 0.3%CVE-2026-11421MEDIUMERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' ParameterEPSS 0.3%CVE-2026-12406MEDIUMUser Frontend <= 4.3.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' ParameterEPSS 0.3%CVE-2023-28989MEDIUMWordPress Happy Addons for Elementor Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2024-24711MEDIUMWordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-59522MEDIUMWordPress WP ERP plugin <= 1.17.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-39377HIGHWordPress Appsero Helper plugin <= 1.3.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-10520MEDIUMWP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/DeletionEPSS 0.3%CVE-2023-45002MEDIUMWordPress WP User Frontend plugin <= 3.6.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-24364MEDIUMWordPress WP User Frontend plugin <= 4.2.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-63008MEDIUMWordPress WP ERP plugin <= 1.16.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-45765MEDIUMWordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-31917HIGHWordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-43238HIGHWordPress weMail plugin <= 1.14.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-11582HIGHSubscribe2 – Form, Email Subscribers & Newsletters <= 10.43 - Unauthenticated Stored Cross-Site Scripting via IP ParameterEPSS 0.3%CVE-2023-3407MEDIUMSubscribe2 <= 10.40 - Cross-Site Request ForgeryEPSS 0.3%CVE-2025-2541MEDIUMWP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%