melhorenvio

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

melhorenvio records in CISA KEV

No melhorenvio vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-39607 CVE-2026-54804 · GHSA-g54j-mfpf-9c6r

WordPress Melhor Envio plugin <= 2.16.3 - Broken Authentication vulnerability

LOW 33

Subscriber Broken Authentication in Melhor Envio <= 2.16.3 versions.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00274 Published 2026-06-17 No fix listed CWE-288

TI-2024-12844 CVE-2024-13820 · GHSA-fp5g-w23g-5r66

Melhor Envio <= 2.15.11 - Unauthenticated Sensitive Information Exposure via Hardcoded Hash

LOW 30

The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.15.11 via the 'run' function, which uses a hardcoded hash.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00418 Published 2025-04-08 No fix listed CWE-200

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0