Vulnerabilities in unknown

4,752 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2024-6460CRITICALGrow by Tradedoubler <= 2.0.21 - Unauthenticated LFIEPSS 4.8%CVE-2023-2996—Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via APIEPSS 4.8%CVE-2022-4059CRITICALCryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLiEPSS 4.8%CVE-2021-24170—User Profile Picture < 2.5.0 - Sensitive Information DisclosureEPSS 4.8%CVE-2022-1001—WP Downgrade < 1.2.3 - Admin+ Stored Cross-Site ScriptingEPSS 4.8%CVE-2022-4447CRITICALFontsy <= 1.8.6 - Multiple Unauthenticated SQLiEPSS 4.8%CVE-2022-4050CRITICALJoomSport < 5.2.8 - Unauthenticated SQLiEPSS 4.8%CVE-2022-4049CRITICALWP User <= 7.0 - Unauthenticated SQLiEPSS 4.8%CVE-2021-24404—WP-Board <= 1.1 (beta) - Unauthenticated SQL InjectionEPSS 4.7%CVE-2021-24402—WP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL InjectionEPSS 4.6%CVE-2021-24401—WP Domain Redirect <= 1.0 - Authenticated SQL InjectionEPSS 4.6%CVE-2018-17914—InduSoft Web Studio versions prior to 8.1 SP2, and InTouch Edge HMI (formerly InTouch Machine Edition) versions prior to 2017 SP2. This vulnEPSS 4.6%CVE-2022-3982CRITICALBooking Calendar < 3.2.2 - Unauthenticated Arbitrary File UploadEPSS 4.5%CVE-2022-4328CRITICALWooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File UploadEPSS 4.4%CVE-2023-0261HIGHWP TripAdvisor Review Slider < 10.8 - Subscriber+ SQLiEPSS 4.4%CVE-2021-24150—Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRFEPSS 4.3%CVE-2022-0165—Page Builder KingComposer <= 2.9.6 - Open RedirectEPSS 4.3%CVE-2021-24684—PDF Light Viewer < 1.4.12 - Authenticated Command InjectionEPSS 4.3%CVE-2023-0600CRITICALWP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLiEPSS 4.2%CVE-2022-1054—RSVP and Event Management < 2.7.8 - Unauthenticated Entries ExportEPSS 4.2%