Vulnerabilities in unknown

5,518 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-2711—Ultimate Product Catalog < 5.2.6 - Admin+ Stored XSSEPSS 0.5%CVE-2024-1846MEDIUMResponsive Tabs < 4.0.7 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-1614MEDIUMWP Custom Author URL < 1.0.5 - Admin+ Stored XSSEPSS 0.5%CVE-2023-1525MEDIUMSite Reviews < 6.7.1 - Admin+ Stored XSSEPSS 0.5%CVE-2023-5307MEDIUMPhotos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP HeadersEPSS 0.5%CVE-2024-3669MEDIUMWeb Directory Free < 1.7.2 - Reflected XSSEPSS 0.5%CVE-2023-3130—Short URL < 1.6.5 - Admin+ Cross Site ScriptingEPSS 0.5%CVE-2022-3206MEDIUMPassster < 3.5.5.5.2 - Insecure Storage of PasswordEPSS 0.5%CVE-2023-1400MEDIUMModern Events Calendar lite < 6.5.2 - Admin+ Stored XSSEPSS 0.5%CVE-2024-2836MEDIUMSuper Socializer < 7.13.64 - Editor+ Stored XSSEPSS 0.5%CVE-2024-4977MEDIUMIndex WP MySQL For Speed < 1.4.18 - Admin+ Reflected XSSEPSS 0.5%CVE-2023-2399MEDIUMqubotchat < 1.1.6 - Unauthenticated Stored XSSEPSS 0.5%CVE-2024-1292MEDIUMWPB Show Core < 2.6 - Reflected XSSEPSS 0.5%CVE-2024-1956MEDIUMWPB Show Core < 2.7 - Reflected XSSEPSS 0.5%CVE-2023-5644HIGHWP Mail Log < 1.1.3 – Incorrect Authorization in REST API EndpointsEPSS 0.5%CVE-2026-81650HIGHNextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP ImportEPSS 0.5%CVE-2026-13158HIGHEverest Toolkit <= 1.2.3 - Admin+ Arbitrary File UploadEPSS 0.5%CVE-2026-13157HIGHTheme Demo Import <= 1.1.3 - Admin+ Arbitrary File UploadEPSS 0.5%CVE-2026-18366CRITICALEvents Manager < 7.4.1 - Unauthenticated Privilege Escalation to AdministratorEPSS 0.5%CVE-2026-14919CRITICALShopMonitor.io < 1.2.0 - Unauthenticated Administrator Account Takeover via Password-Reset Email RerouteEPSS 0.5%