Vulnerabilities in Unknown

5,591 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-97319MEDIUMPowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player BlockEPSS 0.2%CVE-2026-85002MEDIUMEmbedPress < 4.6.7 - Contributor+ Stored XSS via Instagram Carousel Block AttributesEPSS 0.2%CVE-2026-92411MEDIUMWP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag NameEPSS 0.2%CVE-2026-87777MEDIUMHostinger Reach 1.0.6 - 1.8.2 - Contributor+ Stored XSS via formId Elementor Widget AttributeEPSS 0.2%CVE-2026-13718MEDIUMTabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab ContentEPSS 0.2%CVE-2026-91073MEDIUMSubscribe Forms 1.4.1 - 1.6.2 - Author+ Stored XSS via Attention Effect Form SettingEPSS 0.2%CVE-2026-89006MEDIUMWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed ImportEPSS 0.2%CVE-2026-13406MEDIUMRoyal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term DisclosureEPSS 0.2%CVE-2026-89002MEDIUMWPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Stored XSS via Campaign Item PreviewEPSS 0.2%CVE-2026-96895MEDIUMWP YouTube Lyte < 1.7.31 - Contributor+ Stored XSS via Embed Block AttributesEPSS 0.2%CVE-2026-85415MEDIUMAudio Player Block 1.1.0 - 1.6.2 - Contributor+ Stored XSS via Audio Download URLEPSS 0.2%CVE-2026-85001MEDIUMEmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle AttributeEPSS 0.2%CVE-2026-90952MEDIUMWP Edit Password Protected 2.0.0 - 2.0.6 - Unauthenticated Site-Wide Access Mode Bypass via REST APIEPSS 0.2%CVE-2026-92424MEDIUMContent Egg < 11.9.0 - Contributor+ Stored XSS via Import QueueEPSS 0.2%CVE-2026-14844MEDIUMMaster Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode AttributesEPSS 0.2%CVE-2026-86817MEDIUMFive Star Business Profile and Schema 2.3.20 - 2.3.21 - Author+ Sensitive Data Disclosure via Schema Field Default CallbackEPSS 0.2%CVE-2026-19251MEDIUMUltimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile ActivityEPSS 0.2%CVE-2026-16262HIGHEstatik < 4.3.3 - Login CSRFEPSS 0.2%CVE-2026-12526HIGHAdvanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update ActionEPSS 0.2%CVE-2025-9487MEDIUMAdmin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVGEPSS 0.2%