Vulnerabilidades em wpweaver
8 resultadosAnálise Vexday
WPWeaver apresenta 7 vulnerabilidades catalogadas, todas de severidade moderada ou inferior, com nenhuma sob exploração ativa conhecida. A fraqueza predominante é Cross-Site Scripting (CWE-79), padrão em plugins WordPress, e não há registros de divulgações recentes, indicando um risco estabilizado e de menor prioridade no curto prazo.
CVE-2023-1403MEDIUMWeaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display NameEPSS 0.5%CVE-2023-1404MEDIUMWeaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display NameEPSS 0.5%CVE-2026-10035MEDIUMTurnkey bbPress by WeaverTheme <= 1.7.1 - Authenticated (Administrator+) PHP Object InjectionEPSS 0.4%CVE-2024-12221MEDIUMTurnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce ParameterEPSS 0.4%CVE-2023-6990MEDIUMWeaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-4939MEDIUMWeaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div ShortcodeEPSS 0.3%CVE-2025-22267MEDIUMWordPress Weaver Themes Shortcode Compatibility Plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-2121MEDIUMWeaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget SettingEPSS 0.2%