Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2023-0589MEDIUMWP Image Carousel <= 1.0.2 - Contributor+ Stored XSSEPSS 0.4%CVE-2022-4782—ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2023-0152MEDIUMWP Multi Store Locator <= 2.4 - Contributor+ Stored XSSEPSS 0.4%CVE-2022-4623—ND Shortcodes < 7.0 - Contributor+ Stored XSS via ShortcodesEPSS 0.4%CVE-2021-4457CRITICALZoomSounds < 6.05 - Unauthenticated Arbitrary File UploadEPSS 0.4%CVE-2023-0489—SlideOnline <= 1.2.1 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-4145LOWSearch & Replace < 3.2.2 - Admin+ SQL injectionEPSS 0.4%CVE-2023-0418MEDIUMVideo Central for WordPress <= 1.3.0 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-5141—BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2022-4676MEDIUMOSM – OpenStreetMap <= 6.01 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2023-0078MEDIUMResume Builder <= 3.1.1 - Subscriber+ Stored XSSEPSS 0.4%CVE-2023-0374MEDIUMW4 Post List < 2.4.6 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-5140—Bonus for Woo < 5.8.3 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2023-1323MEDIUMEasy Forms for MailChimp < 6.8.9 - Admin+ Stored XSSEPSS 0.4%CVE-2022-3119HIGHOAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication BypassEPSS 0.4%CVE-2026-75797HIGHAI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' ParameterEPSS 0.4%CVE-2022-3881MEDIUMWPTools < 3.43 - Subscriber+ Arbitrary Plugin InstallationEPSS 0.4%CVE-2024-1331MEDIUMTeam Members < 5.3.2 - Author+ Stored XSSEPSS 0.4%CVE-2024-1752MEDIUMFont Farsi <= 1.6.6 - Admin+ Stored XSS in SettingsEPSS 0.4%CVE-2023-1122MEDIUMSimple Giveaways < 2.45.1 - Editor+ Stored Cross-Site ScriptingEPSS 0.4%