Vulnerabilities in Unknown

5,520 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2023-0539—GS Insever Portfolio < 1.4.5 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4679MEDIUMWufoo Shortcode < 1.52 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2023-0548MEDIUMNamaste! LMS < 2.5.9.4 - Admin+ Stored XSSEPSS 0.5%CVE-2023-6485MEDIUMHtml5 Video Player < 2.5.19 - Subscriber+ Stored XSSEPSS 0.5%CVE-2023-3771MEDIUMT1 theme <= 19.0 - Open RedirectEPSS 0.5%CVE-2022-2381—E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRFEPSS 0.5%CVE-2021-24978—OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post DeletionEPSS 0.5%CVE-2022-3610MEDIUMJeeng Push Notifications < 2.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-3834MEDIUMGoogle Forms <= 0.95 - Admin+ Stored XSSEPSS 0.5%CVE-2021-24595—WP Cookie Choice <= 1.1.0 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-2983MEDIUMSalat Times < 3.2.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-4950MEDIUMFunnelforms Free < 3.4 Unauthenticated Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-0362MEDIUMThemify Portfolio Post < 1.2.2 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4307MEDIUMPardakht Delkhah < 2.9.3 - Unauthenticated Stored XSSEPSS 0.5%CVE-2022-3833MEDIUMFancier Author Box by ThematoSoup <= 1.4 - Admin+ Stored XSSEPSS 0.5%CVE-2023-0379MEDIUMSpotlight Social Feeds < 1.4.3 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-3601MEDIUMSimple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOREPSS 0.5%CVE-2026-12720HIGHKirki < 6.0.13 - Unauthenticated PHP Object InjectionEPSS 0.5%CVE-2021-24950—Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSSEPSS 0.5%CVE-2021-25042—WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSSEPSS 0.5%