Vulnerabilities in Unknown

5,576 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-10820HIGHProfilePress < 4.16.17 - Subscriber+ Subscription Cancellation via IDOREPSS 0.4%CVE-2026-16948HIGHSolace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wide Nonce ExposureEPSS 0.4%CVE-2026-91019MEDIUMEvent Booking Manager for WooCommerce < 5.6.0 - Contributor+ Payment Gateway Credential DisclosureEPSS 0.4%CVE-2024-6792LOWWP ULike < 4.7.2.1 - Subscriber+ Stored-XSSEPSS 0.4%CVE-2026-17018MEDIUMCubeWP Framework <= 1.1.30 - Contributor+ Arbitrary Post and User Meta Disclosure via IDOREPSS 0.4%CVE-2021-24173—VM Backups <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)EPSS 0.4%CVE-2026-14939MEDIUMVisualizer: Tables and Charts Manager < 4.0.6 - Contributor+ Server-Side Request Forgery via JSON ImportEPSS 0.4%CVE-2023-5124MEDIUMPageLayer < 1.8.0 - Author+ Stored XSSEPSS 0.4%CVE-2024-8536MEDIUMUltimate Blocks < 3.2.2 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-4823MEDIUMWP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS EPSS 0.4%CVE-2024-8239MEDIUMStarbox < 3.5.3 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-6025MEDIUMQuiz and Survey Master < 9.0.5 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-2767MEDIUMWordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2022-3750MEDIUMAsk Me < 6.8.7 - Post Deletion via CSRFEPSS 0.4%CVE-2024-9600MEDIUMDitty < 3.1.47 - Author+ Stored XSSEPSS 0.4%CVE-2024-8619MEDIUMAjax Search Lite <= 4.12.2 - Admin+ Stored XSSEPSS 0.4%CVE-2024-7691MEDIUMFlaming Forms <= 1.0.1 - Unauthenticated Stored XSSEPSS 0.4%CVE-2024-13669MEDIUMCalendApp <= 1.1 - Reflected XSSEPSS 0.4%CVE-2024-4886MEDIUMBuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOREPSS 0.4%CVE-2024-6026MEDIUMSlider by 10Web < 1.2.56 - Editor+ Stored XSSEPSS 0.4%