Vulnerabilidades em wpsoul
30 resultadosAnálise Vexday
O fornecedor wpsoul apresenta 18 vulnerabilidades catalogadas, predominantemente relacionadas a Cross-Site Scripting (CWE-79), sem atividade crítica imediata: nenhuma está sob ataque ativo conhecido e nenhuma foi publicada nos últimos 90 dias. O panorama sugere risco residual de baixa urgência, embora a presença de XSS demande atenção contínua em contextos onde a injeção de código cliente impacte segurança de dados sensíveis.
CVE-2025-49301MEDIUMWordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-51926MEDIUMWordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-35765MEDIUMWordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-120520MEDIUMGreenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} ParameterEPSS 0.3%CVE-2026-2593MEDIUMGreenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-1927MEDIUMGreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_cssEPSS 0.2%CVE-2026-119218MEDIUMGreenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefixEPSS 0.2%CVE-2026-93880MEDIUMGreenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic PlaceholderEPSS 0.2%CVE-2025-57884MEDIUMWordPress Greenshift Plugin <= 12.1.1 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-11841MEDIUMGreenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data AttributesEPSS 0.2%