Vulnerabilities in Unknown

5,615 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-1306MEDIUMSmart Forms < 2.6.94 - Edit Entries via CSRFEPSS 0.2%CVE-2026-16942MEDIUMWP Custom HTML Pages <= 0.6.2 - Author+ Stored XSSEPSS 0.2%CVE-2025-15665MEDIUMBEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode FieldEPSS 0.2%CVE-2026-85418MEDIUMOrbit Fox < 3.0.9 - Contributor+ Stored XSS via Beaver Builder Pricing Table WidgetEPSS 0.2%CVE-2026-84095HIGHWP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review ImportEPSS 0.2%CVE-2026-18395MEDIUMChild Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode AttributesEPSS 0.2%CVE-2026-19423HIGHUltimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile FormsEPSS 0.2%CVE-2026-15262MEDIUMAdmin Columns for ACF Fields <= 0.3.2 - Contributor+ Stored XSS via ACF Field Value ColumnEPSS 0.2%CVE-2026-16537MEDIUMSlick Slider < 0.5.3 - Contributor+ Stored XSS via Gallery ShortcodeEPSS 0.2%CVE-2026-19860MEDIUMJetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation CallbackEPSS 0.2%CVE-2026-15386MEDIUMMeow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt-TextEPSS 0.2%CVE-2026-8378MEDIUMFrontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File RenameEPSS 0.2%CVE-2026-10531MEDIUMAI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode AttributeEPSS 0.2%CVE-2026-84096HIGHWP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form FieldsEPSS 0.2%CVE-2026-16273MEDIUMNarrative Publisher <= 1.0.7 - Contributor+ Stored XSS via narrative_post_script Post MetaEPSS 0.2%CVE-2026-19718HIGHBlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key RecoveryEPSS 0.2%CVE-2026-19217MEDIUMRoyal Elementor Addons < 1.7.1065 - Contributor+ Stored XSS via Icon Box WidgetEPSS 0.2%CVE-2026-19840MEDIUMNotiqoo < 1.4.14 - Contributor+ Arbitrary Option Update via Multiple AJAX ActionsEPSS 0.2%CVE-2026-15234MEDIUMCodeless Page Builder <= 1.1.4 - Contributor+ Stored XSS via Shortcode AttributeEPSS 0.2%CVE-2026-14230MEDIUMECS < 4.3.8 - Contributor+ Stored XSS via Dynamic Repeater BindingsEPSS 0.2%