Vulnerabilidades em wp.insider
10 resultadosAnálise Vexday
O wp.insider apresenta 10 vulnerabilidades cadastradas, com 4 divulgadas nos últimos 90 dias, indicando atividade recente de descoberta. Nenhuma vulnerabilidade está sob ataque ativo no momento e não há registros de críticas, reduzindo a urgência operacional imediata. A fraqueza dominante é CWE-79 (cross-site scripting), um padrão típico em produtos web que demanda controle rigoroso de entrada de dados.
CVE-2024-47354MEDIUMWordPress Simple Membership After Login Redirection plugin <= 1.6 - Open Redirection vulnerabilityEPSS 0.3%CVE-2025-24660HIGHWordPress Simple Membership Custom Messages Plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-49682MEDIUMWordPress Simple Membership plugin <= 4.5.3 - Open Redirection vulnerabilityEPSS 0.3%CVE-2026-34886HIGHWordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-52692HIGHWordPress Affiliates Manager plugin <= 2.9.50 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-25308MEDIUMWordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-49333MEDIUMWordPress Simple Membership plugin <= 4.6.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-57654MEDIUMWordPress Affiliates Manager plugin <= 2.9.49 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-42663MEDIUMWordPress Simple Membership plugin <= 4.7.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24986MEDIUMWordPress Simple Membership WP user Import plugin <= 1.9.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%