Vulnerabilidades en XplodedThemes
9 resultadosAnálisis Vexday
XplodedThemes apresenta 3 vulnerabilidades catalogadas, nenhuma em exploração ativa no momento, com fraqueza predominante em traversal de diretório (CWE-22). Uma vulnerabilidade foi divulgada nos últimos 90 dias, sugerindo atividade recente na base do fornecedor, embora sem criticidade máxima associada.
CVE-2022-35235MEDIUMWordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Read vulnerabilityEPSS 0.9%CVE-2022-40217MEDIUMWordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerabilityEPSS 0.9%CVE-2024-9546MEDIUMWPIDE <= 3.4.9 - Unauthenticated Full Path DislcosureEPSS 0.5%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-8716MEDIUMXT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-9178MEDIUMXT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2026-66440HIGHWordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57766HIGHWordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%