Vulnerabilities in Unknown

5,585 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-6481MEDIUMSearch Filter Pro < 2.5.18 - Admin+ Stored XSSEPSS 0.3%CVE-2024-10551MEDIUMSticky Social Icons <= 1.2.1 - Admin+ Stored XSSEPSS 0.3%CVE-2026-86448LOWLearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_orderEPSS 0.3%CVE-2026-14238MEDIUMVitepos < 3.6.0 - Admin+ SQL Injection via product-details-reportEPSS 0.3%CVE-2026-82182MEDIUMWPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner IsolationEPSS 0.3%CVE-2024-12586MEDIUMChalet Montagne Com Tools <= 2.7.8 - Reflected XSSEPSS 0.3%CVE-2024-7879MEDIUMWP ULike < 4.7.5 - Admin+ Stored XSS via WidgetsEPSS 0.3%CVE-2026-82186MEDIUMWPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' ParameterEPSS 0.3%CVE-2026-84113MEDIUMQuentn WP < 1.2.15 - Admin+ SQLi via 'orderby'/'order' ParameterEPSS 0.3%CVE-2024-6722MEDIUMChatbot Support AI <= 1.0.2 - Admin+ Stored XSSEPSS 0.3%CVE-2026-80488MEDIUMWP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import FieldsEPSS 0.3%CVE-2024-0249HIGHAdvanced Schedule Posts <= 2.1.8 - Reflected XSSEPSS 0.3%CVE-2024-3282MEDIUMWP Table Builder <= 1.5.0 - Admin+ Stored XSSEPSS 0.3%CVE-2024-3635MEDIUMThe Post Grid < 7.5.0 - Editor+ Stored XSS via Grid CreationEPSS 0.3%CVE-2024-6668MEDIUMprofilepro <= 1.3 - Subscriber+ Stored Cross Site ScriptingEPSS 0.3%CVE-2023-7228MEDIUMilli Link Party! <= 1.0 - Unauthenticated Stored XSSEPSS 0.3%CVE-2024-6718MEDIUMPVN Auth Popup <= 1.0.0 - Contributor+ XSS via ShortcodeEPSS 0.3%CVE-2024-12722MEDIUMTwitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via ShortcodeEPSS 0.3%CVE-2022-2171—Progressive License <= 1.1.0 - CSRF to Stored XSSEPSS 0.3%CVE-2026-86475MEDIUMAppointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment SubmissionEPSS 0.3%