Vulnerabilities in Unknown

5,484 results
Vexday analysis

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-1951—Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-ScriptingEPSS 0.8%CVE-2023-5906—Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data ExposureEPSS 0.8%CVE-2022-1788—Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRFEPSS 0.8%CVE-2022-2556—MailChimp for Woocommerce < 2.7.2 - Admin+ SSRFEPSS 0.8%CVE-2023-2713CRITICALIDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.EPSS 0.8%CVE-2023-0278HIGHGeoDirectory < 2.2.24 - Admin+ SQLiEPSS 0.8%CVE-2021-24661—PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content DisclosureEPSS 0.8%CVE-2022-3359HIGHShortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection InjectionEPSS 0.8%CVE-2022-3981HIGHIcegram Express < 5.5.1 - Subscriber+ SQLiEPSS 0.8%CVE-2022-4512MEDIUMBetter Font Awesome < 2.0.4 - Contributor+ Stored XSSEPSS 0.8%CVE-2024-5882HIGHUltimate Classified Listings < 1.3 - Unauthenticated LFIEPSS 0.8%CVE-2026-8386MEDIUMWP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker IDEPSS 0.8%CVE-2021-24504—WP LMS <= 1.1.2 - Stored Cross-Site Scripting (XSS)EPSS 0.8%CVE-2023-4284—Post Timeline < 2.2.6 - Reflected XSSEPSS 0.8%CVE-2026-15038CRITICALInfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on MultisiteEPSS 0.8%CVE-2021-24841—Helpful < 4.4.59 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-2913MEDIUMLogin No Captcha reCAPTCHA < 1.7 - IP Check BypassEPSS 0.8%CVE-2021-24999—Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing ModuleEPSS 0.8%CVE-2021-25001—Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds ModuleEPSS 0.8%CVE-2021-25000—Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General ModuleEPSS 0.8%