Vulnerabilities in unknown

5,520 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-1326—Form - Contact Form <= 1.2.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25066—Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via ImportEPSS 0.6%CVE-2022-0376—User Meta < 2.4.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1644—Call&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-0663—Print, PDF, Email by PrintFriendly < 5.2.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1643—Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-1266—Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSSEPSS 0.6%CVE-2022-1647—FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-4836MEDIUMBreadcrumb < 1.5.33 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-1456—Poll Maker < 4.0.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1335—Slideshow CK < 1.4.10 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2023-6821MEDIUMError Log Viewer < 1.1.3 - Directory Listing to Sensitive Data ExposureEPSS 0.6%CVE-2022-1601—User Access Manager < 2.2.18 - IP SpoofingEPSS 0.6%CVE-2024-13570MEDIUMStray Random Quotes <= 1.9.9 - Reflected XSSEPSS 0.6%CVE-2024-13543MEDIUMZarinpal Paid Downloads <= 2.3 - Reflected XSSEPSS 0.6%CVE-2018-3920HIGHAn exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially craEPSS 0.6%CVE-2022-3391MEDIUMRetain Live Chat <= 0.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2025-13307HIGHOcean Modal Window < 2.3.3 - Editor+ Remote Code Execution via Modal ConditionsEPSS 0.6%CVE-2024-10146MEDIUMSimple File List < 6.1.13 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-1995—miniOrange's Malware Scanner < 4.5.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%