Vulnerabilities in unknown
5,533 resultsVexday analysis
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2024-2603MEDIUMSalon booking system <= 9.6.5 - Editor+ Stored XSS via Email SettingsEPSS 0.5%CVE-2024-2102MEDIUMSalon booking system < 9.6.3 - Unauthenticated Stored XSSEPSS 0.5%CVE-2024-1295MEDIUMThe Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events AccessEPSS 0.5%CVE-2026-81431HIGHRegistration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_idEPSS 0.5%CVE-2023-0490MEDIUMf(x) TOC <= 1.1.0 - Contributor+ Stored XSSEPSS 0.5%CVE-2024-10010MEDIUMLearnPress < 4.2.7.2 - Admin+ Stored XSSEPSS 0.5%CVE-2026-92541HIGHImport and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend ImporterEPSS 0.5%CVE-2026-76554HIGHWP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User ImportEPSS 0.5%CVE-2026-77752HIGHTemporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege EscalationEPSS 0.5%CVE-2023-1019MEDIUMHelp Desk WP <= 1.2.0 - Editor+ Stored XSSEPSS 0.5%CVE-2026-77705HIGHAmelia < 2.4.10 - Amelia Manager+ WordPress Account TakeoverEPSS 0.5%CVE-2026-80071HIGHUser Registration & Membership < 5.2.8 - Author+ Privilege Escalation to AdministratorEPSS 0.5%CVE-2026-81810HIGHAll-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key DisclosureEPSS 0.5%CVE-2026-92540HIGHImport and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via caller_can_promote_usersEPSS 0.5%CVE-2026-13174HIGHEventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOREPSS 0.5%CVE-2022-3911HIGHiubenda < 3.3.3 - Subscriber+ Privileges Escalation to AdminEPSS 0.5%CVE-2023-0395MEDIUMmenu shortcode <= 1.0 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2026-14237HIGHVitepos < 3.6.0 - Outlet Manager+ Privilege EscalationEPSS 0.5%CVE-2026-79996HIGHUser Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login SettingsEPSS 0.5%CVE-2024-0905MEDIUMFancy Product Designer < 6.1.8 - Reflected Cross Site ScriptingEPSS 0.5%