Vulnerabilities in Unknown

5,585 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-16957LOWSlim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta DisclosureEPSS 0.3%CVE-2025-15674LOWContent Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST APIEPSS 0.3%CVE-2026-15939LOWSimple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST APIEPSS 0.3%CVE-2024-6462MEDIUMDL Yandex Metrika <= 1.2 - Admin+ Stored XSSEPSS 0.3%CVE-2026-81200LOWMasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDOREPSS 0.3%CVE-2024-8702MEDIUMBackup Database <= 4.9 - Admin+ Stored XSSEPSS 0.3%CVE-2026-12274MEDIUMTutor LMS < 3.9.13 - Instructor+ Arbitrary Post Overwrite via IDOREPSS 0.3%CVE-2026-78150LOWPost Carousel 4.0.0 - 4.0.7 - Contributor+ Private and Protected Post Content Disclosure via saved-templates-duplicate IDOREPSS 0.3%CVE-2026-81196LOWMasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOREPSS 0.3%CVE-2026-19085LOWCopy & Delete Posts < 1.5.6 - Author+ Password-Protected Post Content DisclosureEPSS 0.3%CVE-2024-8187MEDIUMSmart Post Show <= 3.0.0 - Editor+ Stored XSSEPSS 0.3%CVE-2026-13329MEDIUMWC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order RefundEPSS 0.3%CVE-2025-9978MEDIUMJeg Elementor Kit < 2.7.0 - Author+ Stored XSSEPSS 0.3%CVE-2024-6798MEDIUMDL Verification <= 1.2 - Admin+ Stored XSSEPSS 0.3%CVE-2026-81652LOWNextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOREPSS 0.3%CVE-2026-77785LOWRank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities APIEPSS 0.3%CVE-2026-11867MEDIUMFrontend Admin by DynamiApps < 3.29.7 - Subscriber+ Taxonomy Term Creation/Modification/Deletion via Missing AuthorizationEPSS 0.3%CVE-2026-19711MEDIUMPremium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal RequestEPSS 0.3%CVE-2026-76559MEDIUMWP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL HandlingEPSS 0.3%CVE-2026-16276LOWClassified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_searchEPSS 0.3%