Vulnerabilities in Unknown

5,585 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-14317MEDIUMGiveWP < 4.16.3 - Unauthenticated Payment Gateway Restriction BypassEPSS 0.3%CVE-2022-0642—JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRFEPSS 0.3%CVE-2026-16608MEDIUMDownload Monitor < 5.2.6 - Unauthenticated Download Log InjectionEPSS 0.3%CVE-2026-16962MEDIUMTamara Checkout <= 1.9.9.20 - Unauthenticated Order Status ManipulationEPSS 0.3%CVE-2026-18777MEDIUMTrueBooker Appointment Booking < 1.2.7 - Unauthenticated Arbitrary Appointment Status Change via update_appointment_statusEPSS 0.3%CVE-2026-13390MEDIUMThe Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status ManipulationEPSS 0.3%CVE-2026-14822MEDIUMEvent Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status ManipulationEPSS 0.3%CVE-2026-13692MEDIUMPayU CommercePro < 3.9.0 - Unauthenticated Order TamperingEPSS 0.3%CVE-2026-77013MEDIUMIcollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method DispatchEPSS 0.3%CVE-2024-12568MEDIUMEmail Subscribers < 5.7.45 - Admin+ Stored XSSEPSS 0.3%CVE-2024-10631MEDIUMCountdown Timer <= 1.0.5 - Contributor+ Stored XSSEPSS 0.3%CVE-2022-3025MEDIUMBitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRFEPSS 0.3%CVE-2024-1219MEDIUMEasy Social Feed < 6.5.6 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-12566MEDIUMEmail Subscribers < 5.7.45 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12567MEDIUMEmail Subscribers < 5.7.45 - Admin+ Stored XSSEPSS 0.3%CVE-2022-2312—Student Result or Employee Database < 1.7.5 - Stored Cross Site Scripting via CSRFEPSS 0.3%CVE-2022-2387MEDIUMEasy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRFEPSS 0.3%CVE-2024-4665MEDIUMEventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings updateEPSS 0.3%CVE-2023-0889MEDIUMTF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option UpdateEPSS 0.3%CVE-2024-13825MEDIUMEmail Keep <= 1.1 - Reflected XSSEPSS 0.3%