Vulnerabilidades en Syed Balkhi

39 resultados
Análisis Vexday

Syed Balkhi apresenta 37 vulnerabilidades catalogadas, predominantemente de injeção cross-site (CWE-79), com nenhuma crítica e zero sob exploração ativa. Apenas 2 vulnerabilidades foram divulgadas nos últimos 90 dias, indicando estabilização relativa do risco, embora a fraqueza recorrente em sanitização de entrada demande atenção contínua em processos de desenvolvimento.

CVE-2025-58649MEDIUMWordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2025-58650MEDIUMWordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2024-51675MEDIUMWordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-22646MEDIUMWordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25339MEDIUMWordPress Contact Form by WPForms plugin <= 1.9.8.7 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-64635MEDIUMWordPress Feeds for YouTube plugin <= 2.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-49937MEDIUMWordPress Smash Balloon Social Post Feed plugin <= 4.3.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-52698HIGHWordPress PushEngage – Web Push Notifications, eCommerce Automation & Chat Widget plugin <= 4.2.3 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-24636MEDIUMWordPress Sugar Calendar (Lite) plugin <= 3.9.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-39476MEDIUMWordPress User Feedback plugin <= 1.10.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-49250MEDIUMWordPress Table of Contents Plus plugin <= 2408 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-49685MEDIUMWordPress Custom Twitter Feeds plugin <= 2.2.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-58001MEDIUMWordPress Compact Archives plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-60112MEDIUMWordPress aThemes Addons for Elementor Plugin <= 1.1.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-28141HIGHWordPress NextGEN Gallery plugin <= 4.2.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-32446MEDIUMWordPress Contact Form by WPForms plugin <= 1.9.9.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-47596MEDIUMWordPress Beacon Lead Magnets and Lead Capture plugin <= 1.5.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-66064MEDIUMWordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-40764HIGHWordPress Contact Form by WPForms plugin <= 1.10.0.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%