Vulnerabilidades em wpeverest
70 resultadosAnálise Vexday
A WPEverest apresenta 41 vulnerabilidades catalogadas, sendo 6 críticas (CVSS), com nenhuma sob ataque ativo conhecido até o momento. A fraqueza dominante é falha de autorização (CWE-862), e o ritmo de descoberta permanece ativo com 7 CVEs publicadas nos últimos 90 dias, sinalizando exposições recentes que demandam acompanhamento.
CVE-2026-4056MEDIUMUser Registration & Membership <= 5.1.4 - Missing Authorization to Authenticated (Contributor+) Content Access Rule ManipulationEPSS 0.2%CVE-2026-24353MEDIUMWordPress User Registration plugin <= 4.4.9 - Arbitrary Shortcode Execution vulnerabilityEPSS 0.2%CVE-2026-87111HIGHUser Registration PRO <= 6.2.9 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer HeaderEPSS 0.2%CVE-2026-15222MEDIUMUser Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_nameEPSS 0.2%CVE-2025-3284MEDIUMUser Registration & Membership PRO – Custom Registration Form, Login Form, and User Profile <= 5.1.3 - Cross-Site Request Forgery to User DeletionEPSS 0.2%CVE-2026-92978MEDIUMUser Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()EPSS 0.2%CVE-2026-27070HIGHWordPress Everest Forms Pro plugin <= 1.9.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-42652HIGHWordPress User Registration plugin <= 5.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2025-14976MEDIUMUser Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post DeletionEPSS 0.1%CVE-2026-120513HIGHEverest Forms <= 3.6.2 - Unauthenticated Arbitrary File Deletion via 'everest_forms_{form_id}_old_{field_id}' ParameterEPSS —