Vulnerabilities in unknown

5,518 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-1596MEDIUMtagDiv Composer < 4.0 - Reflected Cross-site ScriptingEPSS 0.5%CVE-2021-24584—Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot UpdateEPSS 0.5%CVE-2026-11855HIGHSimple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API VersionEPSS 0.5%CVE-2026-11767HIGHCRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact FormEPSS 0.5%CVE-2026-85680HIGHUltimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page TitleEPSS 0.5%CVE-2026-88793HIGHYouTube Embed 10.0 - 10.3 - Unauthenticated Stored XSS via youram_serverEPSS 0.5%CVE-2026-84829HIGHOptimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor ParameterEPSS 0.5%CVE-2026-5305HIGHEmail Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSSEPSS 0.5%CVE-2024-1204MEDIUMMeta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field DisclosureEPSS 0.5%CVE-2023-2718—Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.5%CVE-2026-78333HIGH12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event LogEPSS 0.5%CVE-2026-81660HIGHGroundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio FieldEPSS 0.5%CVE-2026-81807HIGHSimple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message LinkificationEPSS 0.5%CVE-2026-85677HIGHGutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment ContentEPSS 0.5%CVE-2026-12968HIGHProduct Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG UploadEPSS 0.5%CVE-2026-76585HIGHCustomer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' ParameterEPSS 0.5%CVE-2026-16617HIGHSimple File List <= 6.3.11 - Unauthenticated Stored XSS via File DescriptionEPSS 0.5%CVE-2026-88792HIGHDictionary <= 1.0 - Unauthenticated Stored XSS via Direct Dictionary UpdateEPSS 0.5%CVE-2026-88824HIGHMaster Blocks 1.4.1 - 1.4.1.4 - Unauthenticated Stored XSS via White Label SettingsEPSS 0.5%CVE-2026-85130HIGHWPLP Cookie Consent < 4.4.4 - Unauthenticated Stored XSS via Consent LogsEPSS 0.5%