Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-4096MEDIUMResponsive Tabs <= 4.0.8 - Contributor+ Stored XSSEPSS 0.4%CVE-2026-13613HIGHKiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST EndpointEPSS 0.4%CVE-2026-10750HIGHRoyal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP ToolsEPSS 0.4%CVE-2024-4750MEDIUMBuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like CommentEPSS 0.4%CVE-2023-2921HIGHShort URL <= 1.6.8 - Subscriber+ SQLiEPSS 0.4%CVE-2023-6046MEDIUMEventON < 2.2 - Admin+ Stored HTML InjectionEPSS 0.4%CVE-2024-5744MEDIUMWP eMember < 10.6.7 - Reflected XSSEPSS 0.4%CVE-2022-1842—OpenBook Book Data <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2022-1092—myCred < 2.4.4 - Subscriber+ Import/Export to Email Address DisclosureEPSS 0.4%CVE-2022-1709—Throws SPAM Away < 3.3.1 - Comment Deletion via CSRFEPSS 0.4%CVE-2022-1957—Comment License < 1.4.0 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2022-1594—HC Custom WP-Admin URL <= 1.4 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2021-25013—Qubely < 1.7.8 - Subscriber+ Arbitrary Post DeletionEPSS 0.4%CVE-2022-1847—Rotating Posts <= 1.11 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2022-0875—miniOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site ScriptingEPSS 0.4%CVE-2022-1653—Social Share Buttons by Supsystic < 2.2.4 - Multiple CSRFEPSS 0.4%CVE-2022-1695—WP Simple Adsense Insertion < 2.1 - Inject ads and javascript via CSRFEPSS 0.4%CVE-2022-1712—LiveSync for WordPress <= 1.0 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2025-1986MEDIUMGutentor < 3.4.7 - Admin+ SQL InjectionEPSS 0.4%CVE-2022-1960—MyCSS <= 1.1 - Arbitrary Settings Update via CSRFEPSS 0.4%