Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-16548MEDIUMBit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response EndpointEPSS 0.4%CVE-2024-8983MEDIUMCustom Twitter Feeds < 2.2.3 - Admin+ Stored XSSEPSS 0.4%CVE-2024-9529MEDIUMSecure Custom Fields < 6.3.6.3 - Admin+ Remote Code ExecutionEPSS 0.4%CVE-2026-14290MEDIUMEmbed Google Photos Album Easily <= 2.2.1 - Contributor+ Stored XSS via link Shortcode AttributeEPSS 0.4%CVE-2026-84022MEDIUMBold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element AttributesEPSS 0.4%CVE-2026-84899MEDIUMVikWidgetsLoader < 1.12.0 - Contributor+ Stored XSS via Gutenberg Block class_suffixEPSS 0.4%CVE-2026-16559MEDIUMYMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon UploadEPSS 0.4%CVE-2026-15047MEDIUMs2Member < 260805 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2026-85678MEDIUMAI Builder 2.4.1 - 2.7.7 - Contributor+ Stored XSS via Post JavaScriptEPSS 0.4%CVE-2026-84088MEDIUMXpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle WidgetEPSS 0.4%CVE-2026-88993MEDIUMAll Bootstrap Blocks <= 1.3.31 - Contributor+ Stored XSS via areoi/button type AttributeEPSS 0.4%CVE-2026-76546MEDIUMProfile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date ShortcodeEPSS 0.4%CVE-2026-74992MEDIUMKirki < 6.2.3 - Editor+ Stored XSS via Font Zip UploadEPSS 0.4%CVE-2026-82884MEDIUMAll in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant BlockEPSS 0.4%CVE-2021-24433MEDIUMSimple Sort&Search <= 0.0.3 - Ccontributor+ Stored XSSEPSS 0.4%CVE-2026-77008MEDIUMHEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings UpdateEPSS 0.4%CVE-2026-84902MEDIUMKing Addons for Elementor < 51.1.81 - Contributor+ Stored XSS via Template Catalog ImportEPSS 0.4%CVE-2026-18202MEDIUMJetEngine < 3.8.14 - Author+ Stored XSS via SVG UploadEPSS 0.4%CVE-2026-19615MEDIUMAdmin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPCEPSS 0.4%CVE-2026-14827MEDIUMCalendar < 1.3.18 - Contributor+ Stored XSS via event_link ParameterEPSS 0.4%