Vulnerabilidades en AresIT
12 resultadosAnálisis Vexday
AresIT apresenta baixo risco imediato com apenas 5 CVEs catalogadas e nenhuma sob ataque ativo ou crítica. A fraqueza dominante é controle de acesso inadequado (CWE-862), indicando vulnerabilidades estruturais em autorização; como nenhuma foi publicada nos últimos 90 dias, o panorama de risco parece estável, embora a correção de falhas de acesso deva ser prioridade.
CVE-2023-6699CRITICALWP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via cssEPSS 0.9%CVE-2024-1934HIGHWP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN ModificationEPSS 0.7%CVE-2023-6812MEDIUMWP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via cssEPSS 0.4%CVE-2025-57899MEDIUMWordPress WP Compress Plugin <= 6.50.54 - Broken Access Control VulnerabilityEPSS 0.4%CVE-2025-2110HIGHWP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple FunctionsEPSS 0.4%CVE-2025-2109MEDIUMWP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init FunctionEPSS 0.4%CVE-2024-12047MEDIUMWP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server ParameterEPSS 0.4%CVE-2024-4445MEDIUMWP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing AuthorizationEPSS 0.3%CVE-2025-47479MEDIUMWordPress WP Compress plugin <= 6.30.30 - Broken Authentication VulnerabilityEPSS 0.3%CVE-2024-47384HIGHWordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-25370MEDIUMWordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-47546HIGHWordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%