Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-1793—Private Files <= 0.40 - Protection Disabling via CSRFEPSS 0.4%CVE-2024-9768MEDIUMFormidable Forms < 6.14.1 - Admin+ Stored XSSEPSS 0.4%CVE-2022-1845—WP Post Styling < 1.3.1 - Multiple CSRFEPSS 0.4%CVE-2022-1895—underConstruction < 1.20 - Construction Mode Deactivation via CSRFEPSS 0.4%CVE-2022-1913—Add Post URL <= 2.1.0 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2026-16954MEDIUMAI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer TokensEPSS 0.4%CVE-2024-8968MEDIUMMaxButtons < 9.8.1 - Admin+ Stored XSS via Text ColorEPSS 0.4%CVE-2022-1603—Mail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRFEPSS 0.4%CVE-2022-1914—Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2022-1846—Tiny Contact Form <= 0.7 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2022-1885—Cimy Header Image Rotator <= 6.1.1 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2022-1573—HTML2WP <= 1.0.0 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2022-1627—My Private Site < 3.0.8 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2022-1844—WP Sentry <= 1.0 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2026-77017HIGHWorkeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass AssignmentEPSS 0.4%CVE-2022-0345—Better Notifications for WP < 1.8.7 - Email Address DisclosureEPSS 0.4%CVE-2022-2555—Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2025-0466MEDIUMSensei LMS < 4.24.4 - Unauthenticated sensei_email/sensei_message DisclosureEPSS 0.4%CVE-2022-3999HIGHWooCommerce Shipping - DPD baltic < 1.2.57 - Subscriber+ Arbitrary Options DeletionEPSS 0.4%CVE-2024-4565HIGHAdvanced Custom Fields < 6.3 - Contributor+ Custom Field AccessEPSS 0.4%