Vulnerabilities in Stiofan
9 resultsVexday analysis
Stiofan apresenta um risco baixo com 9 CVEs catalogadas, nenhuma sob exploração ativa nem crítica. A fragilidade predominante é controle de autorização insuficiente (CWE-862), com apenas 2 vulnerabilidades recentes nos últimos 90 dias, sugerindo um panorama de ameaça estável e sem pressão imediata.
CVE-2025-26967HIGHWordPress Events Calendar for GeoDirectory plugin <= 2.3.14 - PHP Object Injection vulnerabilityEPSS 0.7%CVE-2024-43973MEDIUMWordPress GetPaid plugin <= 2.8.11 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2026-39532HIGHWordPress Events Calendar for GeoDirectory plugin <= 2.3.25 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2024-56255MEDIUMWordPress AyeCode Connect plugin <= 1.3.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-66072MEDIUMWordPress UsersWP plugin <= 1.2.47 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-49064HIGHWordPress GetPaid plugin <= 2.8.49 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-30951MEDIUMWordPress BlockStrap Page Builder - Bootstrap Blocks plugin <= 0.1.36 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-25015MEDIUMWordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2025-67593MEDIUMWordPress UsersWP plugin <= 1.2.48 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%