Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-16992MEDIUMCreate by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and PublicationEPSS 0.3%CVE-2023-3209—MStore API < 3.9.7 - Settings Update via CSRFEPSS 0.3%CVE-2026-12688MEDIUMProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN ForgeryEPSS 0.3%CVE-2026-11588MEDIUMEONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post CreationEPSS 0.3%CVE-2026-11371MEDIUMBetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt InjectionEPSS 0.3%CVE-2026-14315MEDIUMPixel Tag Manager for WooCommerce < 2.2.1 - Unauthenticated Forged Conversion Event SubmissionEPSS 0.3%CVE-2024-12400HIGHTourmaster < 5.3.5 - Reflected XSSEPSS 0.3%CVE-2024-12321HIGHWC Affiliate <= 2.3.9 - Reflected XSSEPSS 0.3%CVE-2026-18666MEDIUMLibrary Management System < 3.6.7 - Subscriber+ SQL Injection via Filter ValueEPSS 0.3%CVE-2024-13574HIGHXV Random Quotes <= 1.40 - Reflected XSSEPSS 0.3%CVE-2024-13862HIGHS3Bubble Media Streaming <= 8.0 - Reflected XSSEPSS 0.3%CVE-2024-11273MEDIUMContact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSEPSS 0.3%CVE-2024-11272MEDIUMContact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSSEPSS 0.3%CVE-2024-11503MEDIUMWP Tabs < 2.2.7 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12682MEDIUMSmart Maintenance Mode < 1.5.2 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13836HIGHWP Login Control <= 2.0.0 - Reflected XSSEPSS 0.3%CVE-2024-12163MEDIUMGoodLayers Core < 2.1.3 - Subscriber+ Stored XSS via SVG UploadEPSS 0.3%CVE-2024-10703MEDIUMRegistrations for The Events Calendar < 2.13.4 - Admin+ Stored XSSEPSS 0.3%CVE-2025-15441MEDIUMForm Maker < 1.15.38 - SQL InjectionEPSS 0.3%CVE-2026-16953MEDIUMAI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via Forgeable Session CookieEPSS 0.3%