Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2023-1089MEDIUMCoupon Zen < 1.0.6 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2025-2279MEDIUMMaps - Google Maps <= 1.0.6 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-10680MEDIUMForm Maker by 10Web < 1.15.32 - Admin+ Stored XSSEPSS 0.3%CVE-2025-1524LOWUltimate Dashboard < 3.8.6 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13381LOWCalculated Fields Form < 5.2.62 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13610MEDIUMSimple Social Media Share Buttons < 6.0.0 - Admin+ Stored XSSEPSS 0.3%CVE-2025-0629MEDIUMCoronavirus (COVID-19) Notice Message <= 1.1.2 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13615LOWSocial Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSSEPSS 0.3%CVE-2026-89236HIGHSaveTo Wishlist Lite < 1.1.5 - Unauthenticated SQLi via 'sort_column' and 'sort_order' ParametersEPSS 0.3%CVE-2023-3366MEDIUMMultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRFEPSS 0.3%CVE-2024-13207MEDIUMWidget for Social Page Feeds < 6.4.2 - Admin+ Stored XSSEPSS 0.3%CVE-2025-3504LOWWP Maps < 4.7.2 - Admin+ Stored XSSEPSS 0.3%CVE-2025-1525LOWUltimate Dashboard < 3.8.6 - Admin+ Stored XSSEPSS 0.3%CVE-2022-4997HIGHJetFormBuilder Stripe Gateway < 1.1.0 - Unauthenticated Blind SQLi via Payment TokenEPSS 0.3%CVE-2023-3178MEDIUMPOST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRFEPSS 0.3%CVE-2025-12502MEDIUMAttention Bar <= 0.7.2.1 - Admin+ SQLiEPSS 0.3%CVE-2025-10635HIGHFind Me On <= 2.0.9.1 - Subscriber+ SQL InjectionEPSS 0.3%CVE-2025-14719MEDIUMRelevanssi (Free < 4.26.0, Premium < 2.29.0) - Contributor+ SQLiEPSS 0.3%CVE-2026-92403LOWSecure Custom Fields < 6.9.4 - Unauthenticated Post Modification via Front-End Form ID SubstitutionEPSS 0.3%CVE-2022-1618MEDIUMCoru LFMember <= 1.0.2 - Stored Cross-Site Scripting via CSRFEPSS 0.3%