Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-4110MEDIUMUltimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_listEPSS 0.3%CVE-2025-3745MEDIUMWP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSSEPSS 0.3%CVE-2024-7859MEDIUMVisual Sound <= 1.03 - Settings Update via CSRFEPSS 0.3%CVE-2024-3919MEDIUMOpenPGP Form Encryption for WordPress < 1.5.1 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-9066MEDIUMWP Compress < 7.10.04 - Reflected XSS via test_zoneEPSS 0.3%CVE-2026-11881MEDIUMFluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time FieldEPSS 0.3%CVE-2024-7864MEDIUMFavicon Generator < 2.1 - Arbitrary File Deletion via CSRFEPSS 0.3%CVE-2026-10551MEDIUMBreeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify LibraryEPSS 0.3%CVE-2026-16583MEDIUMOrbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG UploadEPSS 0.3%CVE-2026-14921MEDIUMUltimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons ShortcodeEPSS 0.3%CVE-2024-2843MEDIUMWooCommerce Customers Manager < 30.1 - User Deletion via CSRFEPSS 0.3%CVE-2025-8281HIGHWP Talroo <= 2.4 - Reflected XSSEPSS 0.3%CVE-2026-19712MEDIUMMasteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz DescriptionEPSS 0.3%CVE-2026-14331MEDIUMSubscribe2 < 10.46 - Reflected XSS via email ParameterEPSS 0.3%CVE-2026-13400MEDIUMSimply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer InformationEPSS 0.3%CVE-2026-14841MEDIUMKing Addons for Elementor < 51.1.76 - Reflected XSS via Posts Grid WidgetEPSS 0.3%CVE-2026-13330MEDIUMAnimation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG UploadEPSS 0.3%CVE-2026-12869MEDIUMHeader Footer Builder for Elementor < 1.2.1 - Contributor+ Stored XSS via Template ImportEPSS 0.3%CVE-2026-101159HIGHWP Ultimate Review < 2.4.4 - Unauthenticated Stored XSS via Review SubmissionEPSS 0.3%CVE-2023-1087MEDIUMWC Sales Notification < 1.2.3 - Arbitrary Plugin Activation via CSRFEPSS 0.3%