Vulnerabilities in Unknown

5,576 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-76557MEDIUMWP Import Export Lite < 3.9.33 - Authenticated SQLi via Import OptionsEPSS 0.4%CVE-2024-6884MEDIUMGutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSSEPSS 0.4%CVE-2026-15153MEDIUMWP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List SearchEPSS 0.4%CVE-2024-6020MEDIUMSign-up Sheets < 2.2.13 - Reflected XSSEPSS 0.4%CVE-2026-14872MEDIUMDatabase for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id ParameterEPSS 0.4%CVE-2026-7842MEDIUMInfility Global < 2.15.20 - Editor+ SQL Injection via orderby ParameterEPSS 0.4%CVE-2026-76556MEDIUMWP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter RulesEPSS 0.4%CVE-2024-4627MEDIUMRank Math SEO < 1.0.219 - Authenticated Stored XSSEPSS 0.4%CVE-2026-14601MEDIUMLink Whisper < 0.9.7 - Editor+ SQL Injection via domain ParameterEPSS 0.4%CVE-2024-6408MEDIUMSlider by 10Web < 1.2.57 - Editor+ Stored XSSEPSS 0.4%CVE-2026-16959MEDIUMMedia Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connectorEPSS 0.4%CVE-2023-6081MEDIUMChart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting in New ChartEPSS 0.4%CVE-2023-5458—CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVGEPSS 0.4%CVE-2023-6082MEDIUMChart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-2744MEDIUMNextgen Gallery < 3.59.1 - Admin+ Stored XSSEPSS 0.4%CVE-2024-9156MEDIUMTI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection via lang parametersEPSS 0.4%CVE-2024-3580MEDIUMPopup4Phone <= 1.3.2 - Editor+ Stored XSSEPSS 0.4%CVE-2023-3179—POST SMTP Mailer < 2.5.7 - Account Takeover via CSRFEPSS 0.4%CVE-2023-2330—Caldera Forms Google Sheets Connector < 1.3 - Access Code Update via CSRFEPSS 0.4%CVE-2023-0766HIGHNewsletter Popup <= 1.2 - Record Deletion via CSRFEPSS 0.4%