Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-84750MEDIUMUltimate Addons for Contact Form 7 3.2.4 - 3.5.50 - Unauthenticated Arbitrary File Upload via Signature FieldEPSS 0.4%CVE-2026-88926HIGHVikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLiEPSS 0.4%CVE-2026-13395HIGHBookly < 27.8 - Unauthenticated SQL Injection via staff_idEPSS 0.4%CVE-2026-12512HIGHQuotes Llama < 3.1.6 - Unauthenticated SQL Injection via sc ParameterEPSS 0.4%CVE-2026-12582HIGHLibrary Management System < 3.5.8 - Unauthenticated SQL Injection via book_idEPSS 0.4%CVE-2026-17044HIGHWordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadidEPSS 0.4%CVE-2026-4935HIGHSureTriggers < 1.1.23 – Unauthenticated SQLiEPSS 0.4%CVE-2026-16572HIGHLogMyTrip <= 1.9 - Unauthenticated SQL Injection via 'tid' CookieEPSS 0.4%CVE-2026-11590HIGHWP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated SQL Injection via filter[elements] Array KeysEPSS 0.4%CVE-2026-84068HIGHQuentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' ParameterEPSS 0.4%CVE-2026-16950HIGHProduct Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_productsEPSS 0.4%CVE-2026-82304HIGHMusic Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data HandlerEPSS 0.4%CVE-2026-78472HIGHNi WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' ParameterEPSS 0.4%CVE-2026-87771HIGHProduct Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and readEPSS 0.4%CVE-2026-18474HIGHWP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_categoryEPSS 0.4%CVE-2026-12721HIGHKirki < 6.0.13 - Unauthenticated SQL InjectionEPSS 0.4%CVE-2026-87963HIGHYo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username ParameterEPSS 0.4%CVE-2026-84047HIGHAlbum Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_actionEPSS 0.4%CVE-2026-87767HIGHWP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via urlEPSS 0.4%CVE-2022-4115—Editorial Calendar < 3.8.3 - Contributor+ Stored XSSEPSS 0.4%