Vulnerabilities in Unknown

5,576 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-5079MEDIUMWP eMember < 10.6.7 - Unauthenticated Stored XSS via Member RegistrationEPSS 0.4%CVE-2023-5529MEDIUMAdvanced Page Visit Counter <= 8.0.6 - Admin+ Stored XSSEPSS 0.4%CVE-2026-18052HIGHManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login ParametersEPSS 0.4%CVE-2024-0238MEDIUMEventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata UpdateEPSS 0.4%CVE-2024-10482MEDIUMMedia Library Tools < 1.5.0 - Author+ Stored XSS via SVGEPSS 0.4%CVE-2026-16573HIGHBit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature UploadEPSS 0.4%CVE-2026-11794HIGHAdvanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role MappingEPSS 0.4%CVE-2026-77792HIGHRegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating FieldEPSS 0.4%CVE-2024-6165MEDIUMWANotifier < 2.6.1 - Admin+ Stored XSSEPSS 0.4%CVE-2026-82842HIGHSAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account MatchingEPSS 0.4%CVE-2024-6927MEDIUMViral Signup <= 2.1 - Admin+ Stored XSSEPSS 0.4%CVE-2024-4664MEDIUMWP Chat App < 3.6.5 - Admin+ Stored XSSEPSS 0.4%CVE-2024-5286MEDIUMWP Affiliate Platform < 6.5.1 - Reflected XSS via Banner EditingEPSS 0.4%CVE-2024-3644MEDIUMNewsletter Popup <= 1.2 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3921MEDIUMGianism <= 5.1.0 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3920LOWFlattr <= 1.2.2 - Admin+ Stored XSSEPSS 0.4%CVE-2026-14928MEDIUMJS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubjectEPSS 0.4%CVE-2026-16590MEDIUMWP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data DisclosureEPSS 0.4%CVE-2026-13168MEDIUMEventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST APIEPSS 0.4%CVE-2026-12976MEDIUMLearnPress < 4.4.4 - Subscriber+ Sensitive Information Exposure via AI AssistantEPSS 0.4%