Vulnerabilidades em wisdmlabs
8 resultadosAnálise Vexday
WisdmLabs apresenta footprint reduzido com apenas 3 CVEs catalogadas, nenhuma sob exploração ativa detectada. A vulnerabilidade crítica identificada relaciona-se a autenticação inadequada (CWE-288), mas o risco atual é contido pela ausência de atividade recente de divulgação ou ataque.
CVE-2024-4186CRITICALEdwiser Bridge <= 3.0.5 - Authentication Bypass due to Missing Empty Value CheckEPSS 0.9%CVE-2024-31260HIGHWordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerabilityEPSS 0.5%CVE-2021-4399MEDIUMEdwiser Bridge <= 2.0.6 - Cross-Site Request Forgery BypassEPSS 0.4%CVE-2024-49311MEDIUMWordPress Edwiser Bridge plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-24593HIGHWordPress Edwiser Bridge plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-24570MEDIUMWordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-49312MEDIUMWordPress Edwiser Bridge plugin <= 3.0.7 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-13887MEDIUMAI BotKit <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.2%