Plugin desatualizado: easy-table-of-contents 2.0.86 → 2.0.87 (afiscont.com.br)
Plugin vulnerável: accesspress-facebook-auto-post 2.1.4 (CVE-2023-26532) em afiscont.com.br
Plugin vulnerável: Ultimate_VC_Addons 3.19.6 (CVE-2025-48088, CVE-2025-11814, CVE-2026-15382, CVE-2024-5254, CVE-2023-46205, CVE-2024-5255, CVE-2024-5252, CVE-2026-34889, CVE-2023-46211, CVE-2024-5253, CVE-2026-28038, CVE-2024-5251, CVE-2023-51402) em afiscont.com.br
Plugin vulnerável: js_composer 6.7.0 (CVE-2025-4968, CVE-2024-5708, CVE-2025-11161, CVE-2024-1841, CVE-2024-5265, CVE-2025-11160, CVE-2025-10006, CVE-2024-1842, CVE-2023-31213, CVE-2024-1805, CVE-2024-5709, CVE-2025-4965, CVE-2026-45436, CVE-2024-1840, CVE-2025-7502) em afiscont.com.br
Core WordPress difere do checksum da 20i (1 arquivo(s)) em afiscont.com.br — provável drift de versão/idioma; o deep-scan confirma se é injeção