Vulnerabilities in Unknown

5,576 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-8293HIGHReally Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP SkipEPSS 0.4%CVE-2026-78474MEDIUMNi WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' ParameterEPSS 0.4%CVE-2023-6741MEDIUMWP Customer Area < 8.2.1 - Subscriber+ Account Address UpdateEPSS 0.4%CVE-2026-14235HIGHWordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download KeyEPSS 0.4%CVE-2024-2972LOWFloating Chat Widget < 3.1.9 - Editor+ Stored XSSEPSS 0.4%CVE-2024-10710LOWYaDisk Files <= 1.2.5 - Admin+ Stored XSSEPSS 0.4%CVE-2023-4811MEDIUMWordPress File Upload < 4.23.3 - Author+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-12497HIGHProfilePress < 4.16.18 - Unauthenticated Privilege Escalation via Registration Role SelectionEPSS 0.4%CVE-2021-24837—Passster < 3.5.5.8 - Contributor+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2022-1418—Social Stickers <= 2.2.9 - Stored Cross-Site Scripting via CSRFEPSS 0.4%CVE-2024-6334MEDIUM Easy Table of Contents < 2.0.67 - Editor+ Stored XSSEPSS 0.4%CVE-2022-3763HIGHBooster for WooCommerce - Checkout Files Deletion via CSRFEPSS 0.4%CVE-2022-4653MEDIUMGreenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2022-4669—Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2024-10483HIGHSimplePress Forum < 6.10.11 - Reflected XSSEPSS 0.4%CVE-2026-12277HIGHFrontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path TraversalEPSS 0.4%CVE-2024-13314LOWCarousel, Slider, Gallery by WP Carousel < 2.7.4 - Admin+ Stored XSSEPSS 0.4%CVE-2026-96896HIGHMalcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_requestEPSS 0.4%CVE-2024-2189MEDIUMSocial Icons Widget & Block < 4.2.18 - Admin+ Stored XSSEPSS 0.4%CVE-2026-84937MEDIUMYT Player < 2.1.0 - Contributor+ SQLi via ytp_ajaxEPSS 0.4%