Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-3481MEDIUMCounter Box < 1.2.4 - Counter Deletion via CSRFEPSS 0.3%CVE-2026-87965MEDIUMEasy Appointments < 4.0.2.2 - Unauthenticated Appointment Cancellation/Confirmation via Forgeable Email-Link TokenEPSS 0.3%CVE-2026-17023MEDIUMSalon Booking System – Free Version <= 10.30.33 - Unauthenticated Google Calendar Connection Hijack via OAuth CallbackEPSS 0.3%CVE-2024-13881HIGHLinkMyPosts <= 1.0 - Reflected XSSEPSS 0.3%CVE-2025-14804HIGHFrontend File Manager < 23.5 - Subscriber+ Arbitrary File DeletionEPSS 0.3%CVE-2024-13876HIGHMeintopf <= 0.2.1 - Reflected XSSEPSS 0.3%CVE-2026-9278MEDIUMForm Builder CP < 1.2.47 - Editor+ Stored XSS via form_structureEPSS 0.3%CVE-2026-14292MEDIUMWordPress Download Manager < 3.3.66 - Author+ Stored XSS via Package TitleEPSS 0.3%CVE-2023-5651MEDIUMWP Hotel Booking < 2.0.8 - Subscriber+ Arbitrary Post DeletionEPSS 0.3%CVE-2024-13877HIGHPassbeemedia Web Push Notifications <= 1.0.0 - Reflected XSSEPSS 0.3%CVE-2024-13880HIGHMy Quota <= 1.0.8 - Reflected XSSEPSS 0.3%CVE-2026-14306MEDIUMTutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check BypassEPSS 0.3%CVE-2026-12397MEDIUMWP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOREPSS 0.3%CVE-2026-16979MEDIUMSmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key EnumerationEPSS 0.3%CVE-2026-17020MEDIUMSalon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII DisclosureEPSS 0.3%CVE-2026-14938MEDIUMFluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOREPSS 0.3%CVE-2026-19075MEDIUMAll-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' ParameterEPSS 0.3%CVE-2023-5990—Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRFEPSS 0.3%CVE-2026-13145MEDIUMWP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOREPSS 0.3%CVE-2026-14223MEDIUMEasy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOREPSS 0.3%