Vulnerabilities in Unknown

5,576 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-7084MEDIUMAjax Search Lite < 4.12.1 - Admin+ Stored XSSEPSS 0.4%CVE-2025-2162MEDIUMMapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSSEPSS 0.4%CVE-2026-78137HIGHStoreGrowth: Smart Sales Booster for WooCommerce < 2.1.2 - Unauthenticated Arbitrary Price Manipulation via BOGO Add-to-CartEPSS 0.4%CVE-2024-13688MEDIUMAdmin and Site Enhancements (ASE) < 7.6.10 - Password Protection BypassEPSS 0.4%CVE-2026-11579MEDIUMKali Forms < 2.4.17 - Unauthenticated Media UploadEPSS 0.4%CVE-2023-2628—KiviCare Management System < 3.2.1 - Multiple CSRFEPSS 0.4%CVE-2023-2329—WooCommerce Google Sheet Connector < 1.3.6 - Access Code Update via CSRFEPSS 0.4%CVE-2024-4290HIGHSailthru Triggermail <= 1.1 - Admin+ Stored XSSEPSS 0.4%CVE-2025-14892CRITICALPrime Listing Manager <= 1.1 - Unauthenticated Privilege EscalationEPSS 0.4%CVE-2025-10268MEDIUMPrintcart Web to Print Product Designer for WooCommerce <= 2.4.8 - Unauthenticated Folder Content Disclosure via Path TraversalEPSS 0.4%CVE-2024-5151HIGHSULly < 4.3.1 - Admin+ Stored XSSEPSS 0.4%CVE-2026-16547MEDIUMREST API Log < 1.7.1 - Unauthenticated Sensitive Log Data Disclosure via Download EndpointEPSS 0.4%CVE-2024-5715HIGHWP eMember < 10.6.7 - Reflected XSS via Member EditEPSS 0.4%CVE-2026-18230HIGHWP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section ParameterEPSS 0.4%CVE-2026-88994MEDIUMAll Bootstrap Blocks 1.3.20 - 1.3.31 - Contributor+ LFI via lightspeed Block AttributesEPSS 0.4%CVE-2021-24618—Donate With QRCode < 1.4.5 - Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-15361HIGHContent Views < 4.5 - Subscriber+ SQL Injection via preview_requestEPSS 0.4%CVE-2026-18057HIGHEvents Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL InjectionEPSS 0.4%CVE-2022-2146—Import CSV Files <= 1.0 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2022-4107MEDIUMSMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File DownloadEPSS 0.4%