Vulnerabilities in unknown

5,520 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-4620MEDIUMBooking Calendar < 9.7.3.1 - Unauthenticated Stored XSSEPSS 0.6%CVE-2024-5727MEDIUMWidget4Call <= 1.0.7 - Reflected XSSEPSS 0.6%CVE-2022-4448MEDIUMGiveWP < 2.24.0 - Contributor+ Stored XSSEPSS 0.6%CVE-2023-1129MEDIUMWP FEvents Book <= 0.46 - Subscriber+ Arbitrary Booking Manipulation via IDOREPSS 0.6%CVE-2022-4674MEDIUMIbtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-2629—Top Bar < 3.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2025-4840HIGHLikes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL InjectionEPSS 0.6%CVE-2024-1290MEDIUMFormidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account TakeoverEPSS 0.6%CVE-2022-0421MEDIUMFive Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSSEPSS 0.6%CVE-2022-1732—Rename wp-login.php <= 2.6.0 - Secret URL Update via CSRFEPSS 0.6%CVE-2024-3901MEDIUMGenesis Blocks <= 3.1.3 - Contributor+ Stored XSSEPSS 0.6%CVE-2023-4036MEDIUMSimple Blog Card < 1.32 - Subscriber+ Arbitrary Post AccessEPSS 0.6%CVE-2022-0229—miniOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options DeletionEPSS 0.6%CVE-2022-3536HIGHRole Based Pricing for WooCommerce < 1.6.3 - Subscriber+ PHAR DeserializationEPSS 0.6%CVE-2023-2223—Login Rebuilder < 2.8.1 - Admin+ Stored XSSEPSS 0.6%CVE-2026-12583HIGHNewsletters < 4.15 - Unauthenticated PHP Object Injection via Subscriber Custom FieldEPSS 0.6%CVE-2022-4374MEDIUMBg Bible References <= 3.8.14 - Reflected XSSEPSS 0.6%CVE-2023-0453MEDIUMWP Private Message < 1.0.6 - Private Message Disclosure via IDOREPSS 0.6%CVE-2026-12981HIGHCAFEHAUS API <= 1.0.0 - Unauthenticated Arbitrary User Password ResetEPSS 0.6%CVE-2026-16261HIGHHuge IT Login <= 1.0.4 - Unauthenticated Account TakeoverEPSS 0.6%