Detalhe do ativoAtivo monitorado
Entrar
Voltar para ativos
gfc.cnt.br HTTP inseguro
WordPress · Frota 20i · último scan agora
100score de risco
Configurar
Postura de segurança2/5
Conexão
Vulnerab.
Integridade
Config
Backup
Integridade & snapshotsbaseline hoje 06:00
baseline íntegrosem drift
Findings do ativo
Baixo
HTTPS não forçado (conexão insegura) em gfc.cnt.br
Postura WP · conf. Alta · 20iwp-male8f
Aberto
Médio
Plugin desatualizado: cookie-notice 3.1.5 → 3.1.9 (gfc.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-15d4hj
Resolvido
Médio
Plugin vulnerável: elementor 3.35.8 (CVE-2026-49782, CVE-2026-6127, CVE-2026-8825, CVE-2026-57619) em gfc.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-ti82apCVE-2026-49782CVE-2026-6127CVE-2026-8825CVE-2026-57619
Aberto
Crítico
Plugin vulnerável: elementor-pro 3.29.2 (CVE-2026-32475) em gfc.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-1o2idtiCVE-2026-32475
Aberto
Alto
Plugin vulnerável: elementskit-lite 3.8.2 (CVE-2026-13393, CVE-2026-49052, CVE-2026-4362, CVE-2026-13392, CVE-2026-49053) em gfc.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-1jnsxcaCVE-2026-13393CVE-2026-49052CVE-2026-4362CVE-2026-13392CVE-2026-49053
Aberto
Alto
Plugin vulnerável: gp-premium 2.4.1 (CVE-2026-66627) em gfc.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-fenaalCVE-2026-66627
Aberto
Médio
Plugin desatualizado: head-footer-code 1.3.5 → 1.5.8 (gfc.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-14xbg2t
Aberto
Crítico
Plugin vulnerável: jet-engine 3.5.3 (CVE-2026-56068, CVE-2025-49938, CVE-2026-66581, CVE-2026-14864, CVE-2025-26870, CVE-2025-53196, CVE-2026-54189, CVE-2026-4352, CVE-2026-54187, CVE-2025-67923, CVE-2026-52706, CVE-2025-68495, CVE-2026-66613, CVE-2026-49084, CVE-2025-69333, CVE-2026-54188, CVE-2026-65467, CVE-2025-53194, CVE-2026-28134, CVE-2026-28082, CVE-2026-17019, CVE-2026-18202, CVE-2026-49075, CVE-2025-54688, CVE-2026-42774, CVE-2026-32355, CVE-2026-4662, CVE-2025-0369, CVE-2026-49074, CVE-2025-53195, CVE-2026-49076, CVE-2026-12360) em gfc.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-11ndkcvCVE-2026-56068CVE-2025-49938CVE-2026-66581CVE-2026-14864CVE-2025-26870CVE-2025-53196CVE-2026-54189CVE-2026-4352CVE-2026-54187CVE-2025-67923CVE-2026-52706CVE-2025-68495CVE-2026-66613CVE-2026-49084CVE-2025-69333CVE-2026-54188CVE-2026-65467CVE-2025-53194CVE-2026-28134CVE-2026-28082CVE-2026-17019CVE-2026-18202CVE-2026-49075CVE-2025-54688CVE-2026-42774CVE-2026-32355CVE-2026-4662CVE-2025-0369CVE-2026-49074CVE-2025-53195CVE-2026-49076CVE-2026-12360
Aberto
Médio
Plugin desatualizado: creame-whatsapp-me 6.0.10 → 6.3.2 (gfc.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-43wnej
Aberto
Médio
Plugin desatualizado: -google-captcha 1.75 → 1.87 (gfc.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-vzek04
Aberto
Médio
Plugin desatualizado: redirection 5.4.2 → 5.9.0 (gfc.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-ra99yh
Aberto
Médio
Plugin desatualizado: skyboot-custom-icons-for-elementor 1.1.0 → 1.2.0 (gfc.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-q7p2p1
Aberto
Médio
Plugin desatualizado: wordpress-importer 0.9.5 → 0.9.6 (gfc.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-fc230d
Aberto
Alto
Plugin vulnerável: wpforms-lite 1.8.9.6 (CVE-2025-3794, CVE-2024-11223, CVE-2024-11205, CVE-2024-10593, CVE-2026-15782, CVE-2026-40764, CVE-2024-13403, CVE-2024-56276, CVE-2026-48835, CVE-2026-25339, CVE-2026-32446, CVE-2026-12127, CVE-2026-7792, CVE-2024-7056) em gfc.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-qyk6kpCVE-2025-3794CVE-2024-11223CVE-2024-11205CVE-2024-10593CVE-2026-15782CVE-2026-40764CVE-2024-13403CVE-2024-56276CVE-2026-48835CVE-2026-25339CVE-2026-32446CVE-2026-12127CVE-2026-7792CVE-2024-7056
Aberto
Conectores do ativo
REST autenticadoAtivo
XML-RPC probeAtivo
SSH / WP-CLIIndisponível
Linha do tempo
Plugins · atualização via FTP (1 atualizado(s), 9 com erro)
agora
Remediação assistida
HTTPS não forçado (conexão insegura) em gfc.cnt.br
Plugin vulnerável: elementor 3.35.8 (CVE-2026-49782, CVE-2026-6127, CVE-2026-8825, CVE-2026-57619) em gfc.cnt.br
Plugin vulnerável: elementor-pro 3.29.2 (CVE-2026-32475) em gfc.cnt.br
Plugin vulnerável: elementskit-lite 3.8.2 (CVE-2026-13393, CVE-2026-49052, CVE-2026-4362, CVE-2026-13392, CVE-2026-49053) em gfc.cnt.br
Plugin vulnerável: gp-premium 2.4.1 (CVE-2026-66627) em gfc.cnt.br
Plugin desatualizado: head-footer-code 1.3.5 → 1.5.8 (gfc.cnt.br)
Plugin vulnerável: jet-engine 3.5.3 (CVE-2026-56068, CVE-2025-49938, CVE-2026-66581, CVE-2026-14864, CVE-2025-26870, CVE-2025-53196, CVE-2026-54189, CVE-2026-4352, CVE-2026-54187, CVE-2025-67923, CVE-2026-52706, CVE-2025-68495, CVE-2026-66613, CVE-2026-49084, CVE-2025-69333, CVE-2026-54188, CVE-2026-65467, CVE-2025-53194, CVE-2026-28134, CVE-2026-28082, CVE-2026-17019, CVE-2026-18202, CVE-2026-49075, CVE-2025-54688, CVE-2026-42774, CVE-2026-32355, CVE-2026-4662, CVE-2025-0369, CVE-2026-49074, CVE-2025-53195, CVE-2026-49076, CVE-2026-12360) em gfc.cnt.br
Plugin desatualizado: creame-whatsapp-me 6.0.10 → 6.3.2 (gfc.cnt.br)
Plugin desatualizado: -google-captcha 1.75 → 1.87 (gfc.cnt.br)
Plugin desatualizado: redirection 5.4.2 → 5.9.0 (gfc.cnt.br)
Plugin desatualizado: skyboot-custom-icons-for-elementor 1.1.0 → 1.2.0 (gfc.cnt.br)
Plugin desatualizado: wordpress-importer 0.9.5 → 0.9.6 (gfc.cnt.br)
Plugin vulnerável: wpforms-lite 1.8.9.6 (CVE-2025-3794, CVE-2024-11223, CVE-2024-11205, CVE-2024-10593, CVE-2026-15782, CVE-2026-40764, CVE-2024-13403, CVE-2024-56276, CVE-2026-48835, CVE-2026-25339, CVE-2026-32446, CVE-2026-12127, CVE-2026-7792, CVE-2024-7056) em gfc.cnt.br
Firewall
Carregando… (requer API no ar e o site na 20i).