Vulnerabilidades em mndpsingh287
14 resultadosAnálise Vexday
O fornecedor mndpsingh287 possui 13 CVEs registradas, sendo 3 classificadas como críticas, mas nenhuma sob exploração ativa documentada no KEV. A ausência de publicações recentes (últimos 90 dias) indica um risco estabilizado, embora o padrão de vulnerabilidade em Cross-Site Request Forgery (CWE-352) sugira fraquezas recorrentes em validação de requisições que merecem atenção em avaliações de segurança.
CVE-2024-1538HIGHFile Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File InclusionEPSS 10.7%CVE-2023-6825CRITICALFile Manager And File Manager Pro (Multiple Versions) - Directory TraversalEPSS 6.0%CVE-2024-0761HIGHFile Manager <= 7.2.1 - Sensitive Information Exposure via Backup FilenamesEPSS 1.0%CVE-2024-2654MEDIUMFile Manager <= 7.2.5 - Authenticated (Administrator+) Directory TraversalEPSS 0.9%CVE-2018-25105CRITICALFile Manager <= 3.0 - Unauthenticated Arbitrary File Upload/DownloadEPSS 0.8%CVE-2022-2440HIGHTheme Editor <= 2.8 - Authenticated (Admin+) PHAR DeserializationEPSS 0.7%CVE-2023-6091HIGHWordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerabilityEPSS 0.6%CVE-2025-9890HIGHTheme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code ExecutionEPSS 0.4%CVE-2025-23536HIGHWordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-37254MEDIUMWordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-68008HIGHWordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58822MEDIUMWordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-39640CRITICALWordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerabilityEPSS 0.1%CVE-2025-14469MEDIUMTheme Editor <= 3.1 - Cross-Site Request Forgery to CSS ModificationEPSS 0.1%