Vulnerabilities in Unknown

5,585 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2025-15696MEDIUMReal3D Flipbook Lite < 5.4 - Author+ Stored XSSEPSS 0.3%CVE-2026-14236MEDIUMContact Form 7 – PayPal & Stripe Add-on < 2.5 - Open RedirectEPSS 0.3%CVE-2026-80072MEDIUMUser Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect ParametersEPSS 0.3%CVE-2025-15664MEDIUMBEAF < 4.7.19 - Author+ Stored XSS via Before LabelEPSS 0.3%CVE-2026-12275HIGHTutor LMS < 3.9.13 - Subscriber+ Unauthorized Course Enrollment and Private Course Content Disclosure via Droip/Kirki IntegrationEPSS 0.3%CVE-2025-12835HIGHWooMulti <= 1.7 - Subscriber+ Arbitrary File DeletionEPSS 0.3%CVE-2026-19719MEDIUMSocial Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post TitleEPSS 0.3%CVE-2025-15663MEDIUMBEAF < 4.7.19 - Author+ Stored XSS via After LabelEPSS 0.3%CVE-2026-4079MEDIUMSQL Chart Builder < 2.3.8 - Unauthenticated SQL InjectionEPSS 0.3%CVE-2025-3503MEDIUMWP Maps < 4.7.2 - Admin+ Stored XSSEPSS 0.3%CVE-2022-3024MEDIUMSimple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSSEPSS 0.3%CVE-2026-13607MEDIUMFile Uploads Addon for WooCommerce <= 1.7.6 - Unauthenticated Direct File AccessEPSS 0.3%CVE-2022-4125—Popup Manager <= 1.6.6 - Unauthenticated Stored XSSEPSS 0.3%CVE-2026-92421MEDIUMHydra Booking 1.1.0 - < 1.2.3 - Hydra Host+ Host Profile Takeover via IDOREPSS 0.3%CVE-2022-3847—Showing URL in QR Code <= 0.0.1 - Stored XSS via CSRFEPSS 0.3%CVE-2026-18466MEDIUMWP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option CreationEPSS 0.3%CVE-2026-13432MEDIUMThumbPress < 6.2.2 - Subscriber+ Plugin DeactivationEPSS 0.3%CVE-2025-8889LOWCompress Then Upload < 1.0.5 - Admin+ Arbitrary File UploadEPSS 0.3%CVE-2026-12393MEDIUMWPS Bookings for WooCommerce < 3.11.7 - Subscriber+ Arbitrary Booking Order Cancellation via IDOREPSS 0.3%CVE-2026-14332MEDIUMEcwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disconnection via 'ec_disconnect' ActionEPSS 0.3%