Vulnerabilities in unknown

5,533 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-3919MEDIUMJetpack CRM < 5.4.3 - Admin+ Cross-Site ScriptingEPSS 0.5%CVE-2022-4000MEDIUMWooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSSEPSS 0.5%CVE-2022-3830MEDIUMWP Page Builder <= 1.2.8 - Admin+ Stored Cross-SiteEPSS 0.5%CVE-2026-6381HIGHWP Maps < 4.9.3 - Subscriber+ Local File InclusionEPSS 0.5%CVE-2026-76555MEDIUMWP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path TraversalEPSS 0.5%CVE-2025-15673MEDIUMImport and export users and customers < 2.4.3 - Admin+ Arbitrary File ReadEPSS 0.5%CVE-2026-81199MEDIUMMasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST RouteEPSS 0.5%CVE-2021-24133—ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in SettingsEPSS 0.5%CVE-2022-3935MEDIUMWelcart e-Commerce < 2.8.4 - Multiple Subscriber+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-0389MEDIUMCalculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown FieldsEPSS 0.5%CVE-2024-13126MEDIUMDownload Manager < 3.3.07 - Unauthenticated Data ExposureEPSS 0.5%CVE-2023-3647MEDIUMIURNY by INDIGITALL < 3.2.3 - Admin+ Stored XSSEPSS 0.5%CVE-2022-2839—Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSSEPSS 0.5%CVE-2026-8380MEDIUMFrontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post DeletionEPSS 0.5%CVE-2024-3637MEDIUMResponsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Admin+ Stored XSSEPSS 0.5%CVE-2023-2470—Add to Feedly <= 1.2.11 - Admin+ Stored XSSEPSS 0.5%CVE-2023-2225—SEO ALert <= 1.59 - Admin+ Stored XSSEPSS 0.5%CVE-2022-4791MEDIUMProduct Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2022-4655MEDIUMWelcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2022-4668MEDIUMEasy Appointments < 3.11.2 - Contributor+ Stored XSS in ShortcodeEPSS 0.5%