Vulnerabilities in Unknown

5,582 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-16541MEDIUMSimply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST EndpointsEPSS 0.4%CVE-2026-16590MEDIUMWP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data DisclosureEPSS 0.4%CVE-2026-16595MEDIUMWP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing DisclosureEPSS 0.4%CVE-2026-9709HIGHThemeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta DisclosureEPSS 0.4%CVE-2026-9710HIGHThemeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash DisclosureEPSS 0.4%CVE-2024-6138MEDIUMSecure Copy Content Protection < 4.0.9 - Admin+ Stored XSSEPSS 0.4%CVE-2026-16968MEDIUMGeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_usersEPSS 0.4%CVE-2026-19613MEDIUMECS < 4.3.10 - Contributor+ Arbitrary Post Meta Disclosure via Dynamic Repeater ACF SourceEPSS 0.4%CVE-2026-14928MEDIUMJS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubjectEPSS 0.4%CVE-2026-18943MEDIUMWPC Admin Columns < 2.3.4 - Subscriber+ Arbitrary User/Post/Term Meta DisclosureEPSS 0.4%CVE-2026-13168MEDIUMEventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST APIEPSS 0.4%CVE-2023-6278MEDIUMBiteship for WooCommerce < 2.2.25 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2021-24790—Contact Form Advanced Database <= 1.0.8 - Unauthorised AJAX CallsEPSS 0.4%CVE-2026-9062LOWAgile Store Locator < 1.6.9 - Admin+ Arbitrary File Read via Path TraversalEPSS 0.4%CVE-2022-3538MEDIUMWebmaster Tools Verification <= 1.2 - Unauthenticated Arbitrary Plugin DeactivationEPSS 0.4%CVE-2023-5610—Seraphinite Accelerator < 2.20.29 - Authenticated Arbitrary RedirectEPSS 0.4%CVE-2024-5968MEDIUMPhoto Gallery by 10Web <= 1.8.27 - Admin+ Stored XSSEPSS 0.4%CVE-2023-0431—File Away <= 3.9.9.0.1 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2023-0439—NEX-Forms < 8.4.4 - Authenticated Stored XSSEPSS 0.4%CVE-2026-19224HIGHHummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on MultisiteEPSS 0.4%