Vulnerabilities in unknown

5,520 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-0173MEDIUMWPFunnels < 2.6.9 - Contributor+ Stored XSSEPSS 0.6%CVE-2024-12734MEDIUMAdvance Post Prefix <= 1.1.1 - Reflected XSSEPSS 0.6%CVE-2022-4825MEDIUMWP-ShowHide < 1.05 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2024-13625HIGHTube Video Ads Lite <= 1.5.7 - Reflected XSSEPSS 0.6%CVE-2026-16940CRITICALCustom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path TraversalEPSS 0.6%CVE-2021-24642—Scroll Baner <= 1.0 - CSRF to RCEEPSS 0.6%CVE-2021-24735—Compact WP Audio Player < 1.9.7 - Setting Change via CSRFEPSS 0.6%CVE-2026-18051CRITICALW3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache KeyEPSS 0.6%CVE-2021-24675—One User Avatar < 2.3.7 - Avatar Update via CSRFEPSS 0.6%CVE-2024-13094HIGHWP Triggers Lite <= 2.5.3 - Reflected XSSEPSS 0.6%CVE-2025-12057CRITICALWavePlayer < 3.8.0 - Unauthenticated Arbitrary File UploadEPSS 0.6%CVE-2023-53899MEDIUMPodcastGenerator 3.2.9 Blind Server-Side Request Forgery via XML InjectionEPSS 0.6%CVE-2026-13170HIGHEventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template SettingEPSS 0.6%CVE-2025-6715CRITICALLatepoint < 5.1.94 - Unauthenticated LFIEPSS 0.6%CVE-2023-7253MEDIUMImport WP < 2.13.1 - Admin+ Server-side Request ForgeryEPSS 0.6%CVE-2024-3050CRITICALSite Reviews < 7.0.0 - IP SpoofingEPSS 0.6%CVE-2023-6155MEDIUMQuiz Maker < 6.4.9.5 - Unauthenticated Email Address DisclosureEPSS 0.6%CVE-2024-1286MEDIUMPaid Memberships Pro - Membership Maps Add On < 0.7 - Contributor+ Sensitive Information DisclosureEPSS 0.6%CVE-2023-7232MEDIUMBackup and Restore WordPress <= 1.45 - Unauthenticated Sensitive Data ExposureEPSS 0.6%CVE-2023-3707MEDIUMActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content DisclosureEPSS 0.6%