Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-18032HIGHWP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization BypassEPSS 0.4%CVE-2026-18050HIGHEvents Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploadsEPSS 0.4%CVE-2026-16988HIGHGeoDirectory < 2.8.169 - Unauthenticated Pending/Draft Listing Disclosure via markers REST EndpointEPSS 0.4%CVE-2026-14319HIGHGiveWP < 4.16.3 - Unauthenticated Recurring Donor Information DisclosureEPSS 0.4%CVE-2026-18946HIGHContact Form to Any API < 3.0.7 - Unauthenticated Sensitive File Disclosure via Predictable FilenameEPSS 0.4%CVE-2026-16611HIGHProduct Feed PRO for WooCommerce < 13.5.7 - Unauthenticated Feed Configuration DisclosureEPSS 0.4%CVE-2026-16253HIGHTotal Upkeep < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secretEPSS 0.4%CVE-2026-17022HIGHSalon Booking System – Free Version < 10.30.34 - Unauthenticated Booking Information Disclosure via Booking WizardEPSS 0.4%CVE-2026-11571HIGHEverest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV ArtifactsEPSS 0.4%CVE-2026-18049HIGHWP Photo Album Plus < 9.2.07.002 - Unauthenticated Option Disclosure via gettogoEPSS 0.4%CVE-2026-15048HIGHGeekyBot < 1.2.8 - Unauthenticated Sensitive Information Exposure via Chat HistoryEPSS 0.4%CVE-2026-16604HIGHContent Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disclosure via Content-Lock Block data-content AttributeEPSS 0.4%CVE-2026-17541HIGHBit File Manager < 6.9.1 - Unauthenticated File Activity Log DisclosureEPSS 0.4%CVE-2026-80494HIGHYogeta WP Cloud <= 1.0 - Unauthenticated Arbitrary File DownloadEPSS 0.4%CVE-2026-14839HIGHMapster WP Maps < 1.24.0 - Unauthenticated Private and Draft Post Content DisclosureEPSS 0.4%CVE-2026-77005CRITICALCode Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path TraversalEPSS 0.4%CVE-2022-4946MEDIUMFrontend Post WordPress Plugin <= 2.8.4 - Contributor+ Arbitrary RedirectEPSS 0.4%CVE-2021-24688—Orange Form <= 1.0.1 - Unauthenticated Arbitrary Post DeletionEPSS 0.4%CVE-2023-4035MEDIUMSimple Blog Card < 1.31 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2024-5472HIGHWP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color fieldEPSS 0.4%