Vulnerabilidades em wpdevart
41 resultadosAnálise Vexday
A WPDevArt apresenta um portfólio de 29 vulnerabilidades catalogadas, predominantemente de injeção de código (CWE-79), sem registros de exploração ativa em campo ou vulnerabilidades críticas. Três novos CVEs foram publicados nos últimos 90 dias, indicando descobertas recentes mas em linha com o padrão histórico; o risco permanece baixo na ausência de KEVs e severidade crítica, embora a recorrência de XSS demande revisão de práticas de sanitização de entrada.
CVE-2026-15289MEDIUMBooking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time-Based SQL Injection via 'wpdevart_id'EPSS 0.3%CVE-2023-49741LOWWordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerabilityEPSS 0.3%CVE-2023-46075HIGHWordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2024-7355MEDIUMOrganization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description ParametersEPSS 0.3%CVE-2023-45630HIGHWordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2023-45631MEDIUMWordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-24719MEDIUMWordPress Widget Countdown plugin <= 2.7.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-24384MEDIUMWordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-47443MEDIUMWordPress Widget Countdown plugin <= 2.7.4 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-67574MEDIUMWordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-37542MEDIUMWordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-24388MEDIUMWordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-2537MEDIUMMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via ThickBox JavaScript LibraryEPSS 0.2%CVE-2023-23983MEDIUMWordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2022-50959MEDIUMWordPress Contact Form Builder 1.6.1 Cross-Site Scripting via code_generator.phpEPSS 0.2%CVE-2026-57778MEDIUMWordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-14555MEDIUMCountdown Timer - Widget Countdown <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2023-45629MEDIUMWordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-25435HIGHWordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-62886HIGHWordPress Pricing Table builder plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%