Vulnerabilities in Unknown

5,484 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2021-24908—Check & Log Email < 1.0.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-2083—Simple Single Sign On <= 4.1.0 - Authentication BypassEPSS 0.8%CVE-2022-0287—Mycred < 2.4.4.1 - Subscriber+ User E-mail Addresses DisclosureEPSS 0.8%CVE-2023-0772MEDIUMPopup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content DisclosureEPSS 0.8%CVE-2023-6203—The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post ReadEPSS 0.8%CVE-2021-24473—User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOREPSS 0.8%CVE-2022-1600—YOP Poll < 6.4.3 - IP SpoofingEPSS 0.8%CVE-2024-6536MEDIUMZephyr Project Manager < 3.3.99 - Editor+ XSSEPSS 0.8%CVE-2022-2090—Woo Discount Rules < 2.4.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-2173—Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1220—FoxyShop < 4.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-2178—Aajoda Testimonials < 2.2.2 - Admin+ Stored XSSEPSS 0.8%CVE-2022-1546—WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25051—Modal Window < 5.2.2 - RFI leading to RCE via CSRFEPSS 0.8%CVE-2021-24151HIGHWP Editor < 1.2.7 - Authenticated SQL injectionEPSS 0.8%CVE-2022-3994MEDIUMAuthenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token DisclosureEPSS 0.8%CVE-2021-24905—Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File DeletionEPSS 0.8%CVE-2024-0780HIGHEnjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database ResetEPSS 0.8%CVE-2021-24617—GamePress <= 1.1.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-2532—Feed Them Social < 3.0.1 - Reflected Cross-Site ScriptingEPSS 0.8%