Vulnerabilities in unknown

5,518 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-4226CRITICALRSFirewall < 1.1.25 - IP Block BypassEPSS 0.5%CVE-2022-3220—Advanced Comment Form < 1.2.1 - Admin+ Authenticated Stored XSSEPSS 0.5%CVE-2022-3440MEDIUMRock Convert < 2.6.0 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2025-4652MEDIUMBroadstreet < 1.51.8 - Reflected XSSEPSS 0.5%CVE-2026-14557CRITICALSoftMarket <= 1.0.0 - Unauthenticated Account Takeover via Email Verification BypassEPSS 0.5%CVE-2022-3937MEDIUMEasy Video Player < 1.2.2.3 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-3137—TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file uploadEPSS 0.5%CVE-2023-0405MEDIUMGPT3 AI Content Writer < 1.4.38 - Subscriber+ Arbitrary Post Content UpdateEPSS 0.5%CVE-2026-10821MEDIUMYoast SEO Premium < 27.6.1 - Author+ Arbitrary .htaccess Directive Injection to RCEEPSS 0.5%CVE-2024-3060MEDIUMENL Newsletter <= 1.0.1 - Admin+ SQL InjectionEPSS 0.5%CVE-2026-86801HIGHTo Do List Member 1.4 - 1.6 - Unauthenticated Stored XSS, File Listing and Deletion via Unprotected Upload HandlerEPSS 0.5%CVE-2022-3207—Simple File List < 4.4.12 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-4265—Replyable < 2.2.10 - Subscriber+ PHP Object InjectionEPSS 0.5%CVE-2022-2450MEDIUMreSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX CallsEPSS 0.5%CVE-2022-3688HIGHWPQA < 5.9 - Follow/Unfollow via CSRFEPSS 0.5%CVE-2023-0146MEDIUMNaver Map <= 1.1.0 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-5958—POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site ScriptingEPSS 0.5%CVE-2023-0282MEDIUMYourChannel < 1.2.2 - Subscriber+ Stored XSSEPSS 0.5%CVE-2023-5560—WP-UserOnline < 2.88.3 - Unauthenticated Stored XSSEPSS 0.5%CVE-2023-0733MEDIUMNewsletter Popup <= 1.2 - Unauthenticated Stored XSSEPSS 0.5%