Vulnerabilities in Unknown

5,585 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-82848MEDIUMMasteriyo LMS 1.3.1 - 2.3.3 - Unauthenticated Course Enrollment DisclosureEPSS 0.3%CVE-2023-2143—Enable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSSEPSS 0.3%CVE-2026-18035MEDIUMUser Access Manager < 2.3.15 - Unauthenticated Restricted Content Disclosure via REST APIEPSS 0.3%CVE-2026-77771HIGHminiOrange 2FA (Free & Pro) - 2FA Bypass via Session-Scoped OTP LockoutEPSS 0.3%CVE-2026-91016MEDIUMMotors < 1.4.121 - Unauthenticated Draft/Private Listing DisclosureEPSS 0.3%CVE-2026-14860MEDIUMPodcast Player < 8.3.1 - Unauthenticated Server-Side Request ForgeryEPSS 0.3%CVE-2026-11565HIGHAdvanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_uiEPSS 0.3%CVE-2026-11875MEDIUMWP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Support Ticket Access via Session Cookie ForgeryEPSS 0.3%CVE-2026-82213MEDIUMNexi XPay Build 7.6.1 - 7.6.2 - Unauthenticated Saved Payment Token Disclosure via IDOREPSS 0.3%CVE-2026-19709MEDIUMMembership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret BypassEPSS 0.3%CVE-2026-14229MEDIUMECS < 4.3.8 - Unauthenticated Private Content Disclosure via ecsloadEPSS 0.3%CVE-2026-90984MEDIUMGenerate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form FieldEPSS 0.3%CVE-2026-15255MEDIUMRegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOREPSS 0.3%CVE-2025-15488MEDIUMResponsive Plus < 3.4.3 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.3%CVE-2026-16536MEDIUMSimple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_idEPSS 0.3%CVE-2026-87894MEDIUMRox Appointment Booking 1.0.9 - 1.2.2 - Unauthenticated Customer PII Disclosure via IDOREPSS 0.3%CVE-2026-11869MEDIUMWP DSGVO Tools (GDPR) < 3.1.40 - Unauthenticated Sensitive Information Disclosure via Subject Access RequestEPSS 0.3%CVE-2024-13306MEDIUMWP Google Map < 1.9.4 - Admin+ Stored XSSEPSS 0.3%CVE-2026-16058MEDIUMYayCurrency < 3.3.5 - Unauthenticated Order and Vendor Financial Data Disclosure via Dokan IntegrationEPSS 0.3%CVE-2026-15240HIGHCustomer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator ResolutionEPSS 0.3%