Vulnerabilidades em wproyal

71 resultados
Análise Vexday

O portfólio de vulnerabilidades do wproyal reúne 69 CVEs catalogadas, com 11 surgidas nos últimos 90 dias, o que indica atividade contínua de descoberta. Nenhuma das falhas está confirmada em exploração ativa no catálogo KEV da CISA, e a taxa de exploração ficou abaixo da média geral do catálogo, sugerindo menor pressão imediata de ameaças oportunistas. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), que, embora raramente crítico de forma isolada, pode facilitar ataques de sequestro de sessão e phishing direcionado quando combinado com outras condições. A CVE mais relevante no momento, CVE-2024-1567, apresenta EPSS de 0,0115, indicando probabilidade ainda baixa de exploração em curto prazo, mas deve ser monitorada dado o padrão recente de novas inclusões.

CVE-2024-1567HIGHRoyal Elementor Addons and Templates <= 1.3.94 - Unauthenticated Limited File UploadEPSS 1.1%CVE-2022-4703MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import DeletionEPSS 0.9%CVE-2022-4700MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme ActivationEPSS 0.8%CVE-2022-4702MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin DeactivationEPSS 0.8%CVE-2022-4704MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template ImportEPSS 0.8%CVE-2022-4701MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin ActivationEPSS 0.8%CVE-2022-4710MEDIUMRoyal Elementor Addons <= 1.3.59 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2022-4711MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings UpdateEPSS 0.7%CVE-2022-4705MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template ActivationEPSS 0.6%CVE-2022-4709MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit ImportEPSS 0.6%CVE-2022-4708MEDIUMRoyal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions ModificationEPSS 0.6%CVE-2024-3675MEDIUMRoyal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flip Carousel, Flip Box, Post Grid, and Taxonomy List Widget AttributesEPSS 0.6%CVE-2023-3709MEDIUMRoyal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key DisclosureEPSS 0.6%CVE-2024-10532MEDIUMBard Extra <= 1.2.7 - Missing Authorization to Authenticated (Subscriber+) Demo ImportEPSS 0.5%CVE-2024-0835MEDIUMRoyal Elementor Kit <= 1.0.116 - Missing Authorization to Arbitrary Transient UpdateEPSS 0.5%CVE-2026-4024MEDIUMRoyal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta ModificationEPSS 0.5%CVE-2024-0442MEDIUMRoyal Elementor Addons and Templates <= 1.3.87 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2025-13067HIGHRoyal Addons for Elementor <= 1.7.1049 - Authenticated (Author+) Arbitrary File Upload via main.php Upload BypassEPSS 0.5%CVE-2025-24766HIGHWordPress News Magazine X <= 1.2.35 - Local File Inclusion VulnerabilityEPSS 0.4%CVE-2024-1500MEDIUMRoyal Elementor Addons and Templates <= 1.3.91 - Authenticated (Contributor+) Stored Cross-Site Scripting via Logo WidgetEPSS 0.4%