Vulnerabilidades em wpdiscover
8 resultadosAnálise Vexday
WPDiscover apresenta 8 vulnerabilidades catalogadas, todas de severidade inferior a crítica, sem registro de exploração ativa em campo. A fraqueza dominante é injeção de scripts (CWE-79), padrão típico de plugins WordPress, embora nenhuma descoberta recente nos últimos 90 dias sugira que o risco está estabilizado ou o componente pode estar descontinuado.
CVE-2024-5726HIGHTimeline Event History <= 3.1 - Authenticated (Contributor+) PHP Object InjectionEPSS 0.7%CVE-2024-49325MEDIUMWordPress Photo Gallery Builder plugin <= 3.0 - Broken Access Control to Notice Dismissal vulnerabilityEPSS 0.4%CVE-2025-31595MEDIUMWordPress Timeline Event History plugin <= 3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-13896MEDIUMSocial Feed Gallery Portfolio <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode AttributeEPSS 0.2%CVE-2025-46517MEDIUMWordPress Blog Manager WP plugin <= 1.0.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-1127MEDIUMTimeline Event History <= 3.2 - Reflected Cross-Site ScriptingEPSS 0.2%CVE-2025-69384HIGHWordPress Timeline Event History plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-62130MEDIUMWordPress Accordion Slider Gallery plugin <= 2.7 - Broken Access Control vulnerabilityEPSS 0.2%