Vulnerabilities in Unknown

5,428 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2021-24453—Include Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoningEPSS 5.0%CVE-2022-4117CRITICALIWS - Geo Form Fields <= 1.0 - Unauthenticated SQLiEPSS 5.0%CVE-2021-24644—Images to WebP < 1.9 - Authenticated Local File InclusionEPSS 4.9%CVE-2022-1001—WP Downgrade < 1.2.3 - Admin+ Stored Cross-Site ScriptingEPSS 4.9%CVE-2024-6460CRITICALGrow by Tradedoubler <= 2.0.21 - Unauthenticated LFIEPSS 4.8%CVE-2023-2996—Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via APIEPSS 4.8%CVE-2022-4059CRITICALCryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLiEPSS 4.8%CVE-2021-24170—User Profile Picture < 2.5.0 - Sensitive Information DisclosureEPSS 4.8%CVE-2022-4050CRITICALJoomSport < 5.2.8 - Unauthenticated SQLiEPSS 4.8%CVE-2022-4049CRITICALWP User <= 7.0 - Unauthenticated SQLiEPSS 4.8%CVE-2022-4447CRITICALFontsy <= 1.8.6 - Multiple Unauthenticated SQLiEPSS 4.8%CVE-2021-24404—WP-Board <= 1.1 (beta) - Unauthenticated SQL InjectionEPSS 4.7%CVE-2021-24402—WP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL InjectionEPSS 4.6%CVE-2021-24401—WP Domain Redirect <= 1.0 - Authenticated SQL InjectionEPSS 4.6%CVE-2018-17914—InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnEPSS 4.6%CVE-2022-3982CRITICALBooking Calendar < 3.2.2 - Unauthenticated Arbitrary File UploadEPSS 4.5%CVE-2021-24329—WP Super Cache < 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 4.5%CVE-2022-4328CRITICALWooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File UploadEPSS 4.4%CVE-2023-0261HIGHWP TripAdvisor Review Slider < 10.8 - Subscriber+ SQLiEPSS 4.4%CVE-2021-24150—Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRFEPSS 4.3%