Vulnerabilities in unknown

5,533 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2024-13117MEDIUMSocial Share Buttons for WordPress <= 2.7 - Unauthenticated Image Upload & Path TraversalEPSS 0.5%CVE-2022-3343LOWWPQA < 5.9.3 - Missing validation lead to functionality abuseEPSS 0.5%CVE-2023-4836MEDIUMWordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOREPSS 0.5%CVE-2021-24725—Comment Link Remove and Other Comment Tools < 2.1.6 - Arbitrary Comment Deletion via CSRFEPSS 0.5%CVE-2023-2398—Icegram Engage < 3.1.12 - Reflected XSSEPSS 0.5%CVE-2023-0442MEDIUMLoan Comparison < 1.5.2 - Reflected XSS via shortcodeEPSS 0.5%CVE-2023-3182—Membership Plugin - Restrict Content < 3.2.3 - Reflected XSSEPSS 0.5%CVE-2022-4267MEDIUMBulk Delete Users by Email <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2023-2472MEDIUMNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSSEPSS 0.5%CVE-2023-2803—Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSSEPSS 0.5%CVE-2023-2743MEDIUMWP ERP < 1.12.4 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2022-4369MEDIUMWP-Lister Lite for Amazon < 2.4.4 - Reflected XSSEPSS 0.5%CVE-2022-4385—Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order UpdateEPSS 0.5%CVE-2022-2094MEDIUMYellow Yard Searchbar < 2.8.2 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2025-10686HIGHCreta Testimonial Showcase < 1.2.4 - Editor+ Local File InclusionEPSS 0.5%CVE-2023-2701—Gravity Forms < 2.7.5 - Reflected XSSEPSS 0.5%CVE-2023-4476MEDIUMLocatoraid Store Locator < 3.9.24 - Reflected XSSEPSS 0.5%CVE-2023-1891—Accordion & FAQ < 1.9.9 - Reflected XSSEPSS 0.5%CVE-2024-6228HIGHWANotifier < 2.6 - Subscriber+ LFIEPSS 0.5%CVE-2023-4253MEDIUMChatbot < 4.7.8 - Admin+ Stored XSS in FAQ BuilderEPSS 0.5%