Vulnerabilities in unknown

5,518 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-0548MEDIUMNamaste! LMS < 2.5.9.4 - Admin+ Stored XSSEPSS 0.5%CVE-2023-6485MEDIUMHtml5 Video Player < 2.5.19 - Subscriber+ Stored XSSEPSS 0.5%CVE-2023-3771MEDIUMT1 theme <= 19.0 - Open RedirectEPSS 0.5%CVE-2022-2381—E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRFEPSS 0.5%CVE-2021-24978—OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post DeletionEPSS 0.5%CVE-2021-24595—WP Cookie Choice <= 1.1.0 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-3834MEDIUMGoogle Forms <= 0.95 - Admin+ Stored XSSEPSS 0.5%CVE-2023-4950MEDIUMFunnelforms Free < 3.4 Unauthenticated Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-3610MEDIUMJeeng Push Notifications < 2.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-2983MEDIUMSalat Times < 3.2.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-0362MEDIUMThemify Portfolio Post < 1.2.2 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4307MEDIUMPardakht Delkhah < 2.9.3 - Unauthenticated Stored XSSEPSS 0.5%CVE-2022-3833MEDIUMFancier Author Box by ThematoSoup <= 1.4 - Admin+ Stored XSSEPSS 0.5%CVE-2023-0379MEDIUMSpotlight Social Feeds < 1.4.3 - Contributor+ Stored XSSEPSS 0.5%CVE-2026-12720HIGHKirki < 6.0.13 - Unauthenticated PHP Object InjectionEPSS 0.5%CVE-2023-3601MEDIUMSimple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOREPSS 0.5%CVE-2021-24950—Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSSEPSS 0.5%CVE-2021-25018—PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSSEPSS 0.5%CVE-2021-25042—WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSSEPSS 0.5%CVE-2022-3829MEDIUMFont Awesome 4 Menus <= 4.7.0 - Admin+ Stored XSSEPSS 0.5%