Vulnerabilities in Unknown

5,585 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-82126LOWSchema & Structured Data for WP & AMP 1.63 - 1.65 - Contributor+ Non-Public Post Content Disclosure via AI Schema GenerationEPSS 0.3%CVE-2026-12906LOWRTMKit Addons for Elementor < 2.0.9 - Contributor+ Private Post Title DisclosureEPSS 0.3%CVE-2026-14826LOWQuiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOREPSS 0.3%CVE-2026-13598CRITICALRestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to AdministratorEPSS 0.3%CVE-2026-11882LOWBuilderall for WordPress < 3.0.2 - Unauthenticated OAuth Access Token Poisoning via Public REST RoutesEPSS 0.3%CVE-2025-2524MEDIUMNinja Forms < 3.10.1 - Admin+ Stored XSSEPSS 0.3%CVE-2026-12270MEDIUMEverest Forms < 3.5.0 - Unauthenticated Missing Authorization via Site Assistant REST EndpointsEPSS 0.3%CVE-2024-5167HIGHCM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelistEPSS 0.3%CVE-2025-10720MEDIUMWP Private Content Plus <= 3.6.2 - Password Protection BypassEPSS 0.3%CVE-2024-10151MEDIUMAuto iFrame < 2.0 - Contributor+ XSS via ShortcodeEPSS 0.3%CVE-2026-81423MEDIUMAccept Stripe Payments < 2.1.4 - Open Redirect via IPN HandlerEPSS 0.3%CVE-2024-12807MEDIUMSocial Share Buttons for WordPress <= 2.7 - Admin+ Stored XSSEPSS 0.3%CVE-2025-13471MEDIUMUser Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option UpdateEPSS 0.3%CVE-2026-81583MEDIUMTheme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege EscalationEPSS 0.3%CVE-2024-13482MEDIUMIcegram Engage < 3.1.32 - Admin+ Stored XSSEPSS 0.3%CVE-2024-10076MEDIUMJetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSSEPSS 0.3%CVE-2025-9314CRITICALDeveloper Tools <= 1.1.3 – Unauthenticated Arbitrary File UploadEPSS 0.3%CVE-2025-8942CRITICALWP Hotel Booking < 2.2.3 - Subscriber+ Rating ManipulationEPSS 0.3%CVE-2025-15445MEDIUMRestaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/ActivationEPSS 0.3%CVE-2024-10678MEDIUMUltimate Blocks < 3.2.4 - Contributor+ Stored XSSEPSS 0.3%