Vulnerabilidades em stevejburge
10 resultadosAnálise Vexday
O fornecedor stevejburge apresenta 10 vulnerabilidades catalogadas, todas de severidade baixa a média, com nenhuma sob exploração ativa conhecida. A fraqueza dominante é Cross-Site Scripting (CWE-79), indicando exposição a ataques de injeção em cliente. Não há atividade recente de divulgação, sugerindo risco estável e previsível.
CVE-2023-2168MEDIUMTaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-2169MEDIUMTaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-2170MEDIUMTaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-2830MEDIUMWordPress Tag and Category Manager – AI Autotagger <= 3.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2025-13359MEDIUMTag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL InjectionEPSS 0.3%CVE-2025-11972MEDIUMTag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.0 - Authenticated (Editor+) SQL InjectionEPSS 0.3%CVE-2025-13922MEDIUMTag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Authenticated (Contributor+) SQL Injection via ORDER BY ClauseEPSS 0.3%CVE-2025-13354MEDIUMTag, Category, and Taxonomy Manager – AI Autotagger with OpenAI <= 3.40.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Taxonomy Term ManipulationEPSS 0.3%CVE-2025-14371MEDIUMTaxoPress <= 3.41.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Tag ModificationEPSS 0.2%