Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2025-1062LOWSlider, Gallery, Carousel by MetaSlider < 3.95.0 - Editor+ Stored XSSEPSS 0.3%CVE-2025-1452LOWFavorites < 2.3.5 - Admin+ Stored XSSEPSS 0.3%CVE-2026-19704MEDIUMComments – wpDiscuz < 7.6.66 - Unauthenticated Comment Disclosure via SQLiEPSS 0.3%CVE-2025-10406MEDIUMBlindMatrix e-Commerce < 3.1 - Contributor+ LFIEPSS 0.3%CVE-2024-13123LOWAFI < 1.100.0 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12769LOWSimple Banner < 3.0.4 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13122LOWAFI < 1.100.0 - Admin+ Stored XSSEPSS 0.3%CVE-2026-19842HIGHSAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor OverwriteEPSS 0.3%CVE-2025-0717LOWSocial Slider Feed < 2.2.9 - Admin+ Stored XSSEPSS 0.3%CVE-2024-9882MEDIUMSalon Booking System < 10.9.4 - Admin+ Stored XSSEPSS 0.3%CVE-2025-2203MEDIUMWooCommerce Checkout & Funnel Builder by FunnelKit < 3.10.2 - Admin+ SQL InjectionEPSS 0.3%CVE-2025-1286MEDIUMDownload HTML TinyMCE Button <= 1.2 - Reflected XSSEPSS 0.3%CVE-2025-5983MEDIUMMeta Tag Manager < 3.3 - Contributor+ Open RedirectEPSS 0.3%CVE-2024-3405HIGHWP Prayer <= 2.0.9 - Settings Update via CSRFEPSS 0.3%CVE-2025-9111LOWWPBOT < 7.1.0 - Admin+ Stored XSSEPSS 0.3%CVE-2026-19722MEDIUMWPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup RestoreEPSS 0.3%CVE-2025-3581MEDIUMNewsletter < 8.8.5 - Admin+ Stored XSS via WidgetEPSS 0.3%CVE-2026-17013MEDIUMWP Photo Album Plus < 9.2.07.002 - Reflected XSS via lbstartEPSS 0.3%CVE-2025-3582MEDIUMNewsletter < 8.8.5 - Admin+ Stored XSS via FormEPSS 0.3%CVE-2026-11870MEDIUMHide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism BypassEPSS 0.3%