Vulnerabilities in unknown

5,518 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-5958—POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site ScriptingEPSS 0.5%CVE-2023-0733MEDIUMNewsletter Popup <= 1.2 - Unauthenticated Stored XSSEPSS 0.5%CVE-2024-1754MEDIUMNPS computy <= 2.7.5 - Admin+ Stored XSSEPSS 0.5%CVE-2023-5560—WP-UserOnline < 2.88.3 - Unauthenticated Stored XSSEPSS 0.5%CVE-2022-2311MEDIUMFind and Replace All < 1.3 - Reflected Cross Site ScriptingEPSS 0.5%CVE-2023-2751MEDIUMUpload Resume <= 1.2.0 - Captcha BypassEPSS 0.5%CVE-2023-6786MEDIUMPayment Gateway for Telcell <= 2.0.1 - Unauthenticated Open RedirectEPSS 0.5%CVE-2024-8031MEDIUMSecure Downloads < 1.2.3 - Admin+ Arbitrary File DownloadEPSS 0.5%CVE-2022-4477MEDIUMSmash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSSEPSS 0.5%CVE-2025-2048MEDIUMLana Downloads Manager < 1.10.0 - Admin+ Arbitrary File Download via Path TraversalEPSS 0.5%CVE-2023-0219—FluentSMTP < 2.2.3 - Stored XSS via Email LogsEPSS 0.5%CVE-2022-4470MEDIUMWidgets for Google Reviews < 9.8 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-2271—WP Database Backup < 5.9 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2021-24685—Flat Preloader < 1.5.4 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%CVE-2015-10001—WP-Stats < 2.5.2 - CSRF to Stored Cross-Site Scripting (XSS)EPSS 0.5%CVE-2020-36656MEDIUMSpectra < 1.15.0 - Contributor+ Stored Cross-Side ScriptingEPSS 0.5%CVE-2022-4667MEDIUMRSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSSEPSS 0.5%CVE-2026-18216MEDIUMBackup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-LoginEPSS 0.5%CVE-2022-3922MEDIUMBroken Link Checker < 1.11.20 - Admin+ Cross-Site ScriptingEPSS 0.5%CVE-2021-24584—Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot UpdateEPSS 0.5%