Vulnerabilities in Unknown

5,576 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-15258HIGHProduct Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed FilterEPSS 0.4%CVE-2026-16539HIGHSM Page Duplicator <= 1.0.0 - Editor+ SQL Injection via Page DuplicationEPSS 0.4%CVE-2023-6066MEDIUMWP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/UpdateEPSS 0.4%CVE-2026-17017HIGHCubeWP Framework < 1.1.31 - Subscriber+ SQL Injection via cubewp_remove_relationEPSS 0.4%CVE-2024-3641MEDIUMNewsletter Popup <= 1.2 - Unauthenticated Stored XSSEPSS 0.4%CVE-2026-16977HIGHForm Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_nameEPSS 0.4%CVE-2024-12714MEDIUMBacklink Monitoring Manager <= 0.1.3 - Reflected XSSEPSS 0.4%CVE-2024-0856HIGHBooking Calendar < 1.3.83 - CSRF appointment schedulingEPSS 0.4%CVE-2024-12715MEDIUMAsgard Security Scanner <= 0.7 - Reflected XSSEPSS 0.4%CVE-2026-12251HIGHUltimate Member < 2.12.1 - Unauthenticated Privilege Escalation via Role Selection FieldEPSS 0.4%CVE-2024-13678MEDIUMR3W Instafeed <= 1.0 - Reflected XSSEPSS 0.4%CVE-2026-18468HIGHLogin & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Verification State Keyed on a Client-Supplied Address HeaderEPSS 0.4%CVE-2026-86814HIGHUsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider EmailEPSS 0.4%CVE-2026-18469HIGHLogin & Register Forms < 4.0.2 - Unauthenticated Account Takeover via Password Reset Code Brute ForceEPSS 0.4%CVE-2026-12281HIGHShibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header SpoofingEPSS 0.4%CVE-2026-16030HIGHMStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone AuthenticationEPSS 0.4%CVE-2026-18030HIGHBricksforge < 3.1.8.8 - Unauthenticated Arbitrary Password Reset via Pro FormsEPSS 0.4%CVE-2026-82193MEDIUMWPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path TraversalEPSS 0.4%CVE-2026-15368HIGHProfile Builder < 3.16.4 - Unauthenticated Account Takeover via Auto-Login After RegistrationEPSS 0.4%CVE-2026-13142HIGHPasswordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute ForceEPSS 0.4%