Vulnerabilities in Unknown

5,484 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-1689—Note Press <= 0.1.10 - Admin+ SQLi via UpdateEPSS 0.8%CVE-2022-4236MEDIUMWelcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File AccessEPSS 0.8%CVE-2021-24938—WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1688—Note Press <= 0.1.10 - Admin+ SQLi via idEPSS 0.8%CVE-2022-1686—Five Minute Webshop <= 1.3.2 - Admin+ SQLi via idEPSS 0.8%CVE-2022-0327—Master Addons for Elementor < 1.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0321—WP Voting Contest < 3.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1684—Cube Slider <= 1.2 - Admin+ SQLiEPSS 0.8%CVE-2021-24824—Custom Content Shortcode < 4.0.1 - Unauthorised Arbitrary Post Metadata AccessEPSS 0.8%CVE-2022-2080—Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOREPSS 0.8%CVE-2021-24781—Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value ChangeEPSS 0.8%CVE-2022-3846HIGHWorkreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOREPSS 0.8%CVE-2022-0625—Admin Menu Editor <= 1.0.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1216—Advanced Image Sitemap <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1436—WPCargo Track & Trace < 6.9.5 - Reflected Cross Site ScriptingEPSS 0.8%CVE-2022-1009—Smush < 3.9.9 - Admin+ Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1470—Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1171—Vertical scroll recent post < 14.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1547—Check & Log email < 1.0.6 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1218—Domain Replace <= 1.3.8 - Reflected Cross-Site ScriptingEPSS 0.8%