Vulnerabilidades em wordpresschef
10 resultadosAnálise Vexday
WordPressChef acumula 10 vulnerabilidades catalogadas, das quais 2 críticas, sem registro atual de exploração ativa. A fraqueza dominante é autorização inadequada (CWE-862), indicando problemas de controle de acesso. O ritmo recente de 2 publicações nos últimos 90 dias sugere descobertas contínuas, requerendo monitoramento regular de patches.
CVE-2024-4442CRITICALSalon booking system <= 9.9 - Unauthenticated Arbitrary File DeletionEPSS 1.2%CVE-2024-3229CRITICALSalon Booking System <= 10.2 - Unauthenticated Arbitrary File UploadEPSS 0.9%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-4468MEDIUMSalon booking system <= 9.9 - Missing AuthorizationEPSS 0.4%CVE-2026-6320HIGHSalon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path TraversalEPSS 0.4%CVE-2023-3427MEDIUMSalon Booking System <= 8.4.6 - Cross-Site Request Forgery to Admin Role Change to Customer, User Meta Update via save_customerEPSS 0.3%CVE-2025-8492MEDIUMSalon Booking System <= 10.22 - Missing Authorization to Unauthenticated AJAX Actions ExecutionEPSS 0.3%CVE-2026-25334HIGHWordPress Salon Booking System Pro plugin < 10.30.12 - Account Takeover vulnerabilityEPSS 0.3%CVE-2025-32295MEDIUMWordPress Salon Booking Wordpress plugin <= 10.10.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-15070HIGHSalon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code Execution via 'value' ParameterEPSS 0.3%