Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2023-1088MEDIUMWP Plugin Manager < 1.1.8 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2023-0498MEDIUMWP Education < 1.2.7 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2025-3201MEDIUMKali Forms < 2.4.3 - Contributor+ Stored XSSEPSS 0.3%CVE-2021-24870MEDIUMWP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site ScriptingEPSS 0.3%CVE-2023-4150MEDIUMUser Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRFEPSS 0.3%CVE-2023-2271—Tiempo.com <= 0.1.2 - Shortcode Deletion via CSRFEPSS 0.3%CVE-2023-4318MEDIUMHerd Effects < 5.2.4 - Effect Deletion via CSRFEPSS 0.3%CVE-2022-3894MEDIUMWP OAuth Server < 4.2.5 - Arbitrary Post Deletion via CSRFEPSS 0.3%CVE-2023-0499MEDIUMQuickSwish < 1.1.0 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2023-3356—Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSSEPSS 0.3%CVE-2023-0505MEDIUMEver Compare <= 1.2.3 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2023-4307MEDIUMLock User Account <= 1.0.3 - Arbitrary Account Lock/Unlock via CSRFEPSS 0.3%CVE-2023-0504MEDIUMHT Politic < 2.3.8 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2023-0503MEDIUMFree WooCommerce Theme 99fy Extension < 1.2.8 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2023-4209MEDIUMPOEditor < 0.9.8 - Settings Reset via CSRFEPSS 0.3%CVE-2026-84026MEDIUMDirectorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users EndpointEPSS 0.3%CVE-2026-16570HIGHNextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth CallbackEPSS 0.3%CVE-2026-14870HIGHDatabase for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_idEPSS 0.3%CVE-2026-9570HIGHTaskbuilder < 5.0.8 - Reflected XSS via ShortcodeEPSS 0.3%CVE-2026-84741MEDIUMThe Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST APIEPSS 0.3%