Vulnerabilidades em wproyal

71 resultados
Análise Vexday

O portfólio de vulnerabilidades do wproyal reúne 69 CVEs catalogadas, com 11 surgidas nos últimos 90 dias, o que indica atividade contínua de descoberta. Nenhuma das falhas está confirmada em exploração ativa no catálogo KEV da CISA, e a taxa de exploração ficou abaixo da média geral do catálogo, sugerindo menor pressão imediata de ameaças oportunistas. O tipo de falha mais frequente é CWE-79 (Cross-Site Scripting), que, embora raramente crítico de forma isolada, pode facilitar ataques de sequestro de sessão e phishing direcionado quando combinado com outras condições. A CVE mais relevante no momento, CVE-2024-1567, apresenta EPSS de 0,0115, indicando probabilidade ainda baixa de exploração em curto prazo, mas deve ser monitorada dado o padrão recente de novas inclusões.

CVE-2024-8482MEDIUMRoyal Elementor Addons and Templates <= 1.3.986 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Member WidgetEPSS 0.4%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2024-2799MEDIUMRoyal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML TagsEPSS 0.4%CVE-2024-7417MEDIUMRoyal Elementor Addons and Templates <= 1.3.986 - Authenticated (Subscriber+) Private Post DisclosureEPSS 0.4%CVE-2024-9682MEDIUMRoyal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Form Builder WidgetEPSS 0.4%CVE-2024-9668MEDIUMRoyal Elementor Addons and Templates <= 1.7.1001 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown WidgetEPSS 0.4%CVE-2024-9059MEDIUMRoyal Elementor Addons and Template <= 1.7.1001 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Google Maps WidgetEPSS 0.4%CVE-2026-8118MEDIUMRoyal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data Table Widget CSV File SourceEPSS 0.4%CVE-2024-9777MEDIUMAshe <= 2.243 - Reflected Cross-Site Scripting via add_query_arg ParameterEPSS 0.4%CVE-2024-9830MEDIUMBard <= 2.216 - Reflected Cross-Site Scripting via add_query_arg ParameterEPSS 0.4%CVE-2026-6229HIGHRoyal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL ParameterEPSS 0.4%CVE-2024-10798MEDIUMRoyal Elementor Addons and Templates <= 1.7.1003 - Authenticated (Contributor+) Post DisclosureEPSS 0.4%CVE-2026-4803HIGHRoyal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_metaEPSS 0.4%CVE-2026-5162MEDIUMRoyal Addons for Elementor <= 1.7.1056 - Authenticated (Contributor+) Stored Cross-Site Scripting via Instagram Feed WidgetEPSS 0.4%CVE-2022-4707MEDIUMRoyal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creationEPSS 0.3%CVE-2024-4342MEDIUMRoyal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-2798MEDIUMRoyal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-3889MEDIUMRoyal Elementor Addons and Templates <= 1.3.971 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Accordion Title TagsEPSS 0.3%CVE-2024-4087MEDIUMRoyal Elementor Addons and Templates <= 1.3.975 - Authenticated (Contributor+) Stored Cross-Site Scripting via Back to Top WidgetEPSS 0.3%CVE-2024-4489MEDIUMRoyal Elementor Addons and Templates <= 1.3.976 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadsEPSS 0.3%