Vulnerabilities in Unknown

5,533 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-3604HIGHContact Form Entries < 1.3.0 - CSV InjectionEPSS 0.4%CVE-2022-2555—Yotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2024-2509MEDIUMGutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSSEPSS 0.4%CVE-2026-9830HIGHBookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback BugEPSS 0.4%CVE-2023-4799—Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcodeEPSS 0.4%CVE-2026-16036HIGHminiOrange 2FA < 6.2.7 - 2FA Bypass via Password-Only Second-Factor RebindingEPSS 0.4%CVE-2024-4149MEDIUMFloating Chat Widget < 3.2.3 - Admin+ Stored XSSEPSS 0.4%CVE-2023-5620—Webpushr < 4.35.0 - Unauthenticated Stored XSSEPSS 0.4%CVE-2026-84898MEDIUMEventin < 4.1.21 - Contributor+ LFI via Event Layout MetaEPSS 0.4%CVE-2021-25011—WP Google Map < 1.8.1 - Subscriber+ Arbitrary Post Deletion and Plugin's Settings UpdateEPSS 0.4%CVE-2023-5738—WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSSEPSS 0.4%CVE-2021-24968—Ultimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ CreationEPSS 0.4%CVE-2023-7200MEDIUMEventON < 4.4.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2026-12684MEDIUMCustomer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_mediaEPSS 0.4%CVE-2024-4602MEDIUMEmbed Peertube Playlist < 1.10 - Editor+ Stored XSSEPSS 0.4%CVE-2023-4808—WP Post Popup <= 3.7.3 - Admin+ Stored XSSEPSS 0.4%CVE-2023-5940—WP Not Login Hide <= 1.0 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3752MEDIUMCrelly Slider <= 1.4.5 - Admin+ Stored XSSEPSS 0.4%CVE-2023-4970—PubyDoc <= 2.0.6 - Admin+ Stored XSSEPSS 0.4%CVE-2024-1274MEDIUMMy Calendar < 3.4.24 - Authenticated Stored XSSEPSS 0.4%