Vulnerabilities in unknown

5,533 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-6250—BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post ReadEPSS 0.5%CVE-2024-4924MEDIUMSassy social share < 3.3.63 Admin+ Stored Cross-Site scriptingEPSS 0.5%CVE-2023-7233MEDIUMGigPress <= 2.3.29 - Admin+ Stored Cross Site ScriptingEPSS 0.5%CVE-2024-1319MEDIUMEvent Tickets Plus < 5.9.1 - Contributor+ Attendees Lists DisclosureEPSS 0.5%CVE-2024-3751MEDIUMSeriously Simple Podcasting < 3.3.0 - Admin+ Stored XSSEPSS 0.5%CVE-2023-4646MEDIUMSimple Posts Ticker < 1.1.6 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-5167MEDIUMUser Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User AgentEPSS 0.5%CVE-2022-1578HIGHMy wpdb < 2.5 - Arbitrary SQL Query via CSRFEPSS 0.5%CVE-2023-5955MEDIUMContact Form Email < 1.3.44 - Editor+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-4687MEDIUMPageLayer < 1.7.7 - Unauthenticated Stored XSSEPSS 0.5%CVE-2023-5749—EmbedPress < 3.9.2 - Reflected XSSEPSS 0.5%CVE-2025-2055MEDIUMMapPress Maps for WordPress < 2.94.9 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-3245MEDIUMFloating Chat Widget < 3.1.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-4090MEDIUMMy Sticky Bar < 2.7.2 - Admin+ Stored XSSEPSS 0.5%CVE-2023-5737—WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings UpdateEPSS 0.5%CVE-2026-11964CRITICALUser Registration & Membership < 5.2.2 - Unauthenticated PayPal Webhook Signature Verification Bypass Leading to Membership ActivationEPSS 0.5%CVE-2024-0239MEDIUMContact Form 7 Connector < 1.2.3 - Reflected XSSEPSS 0.5%CVE-2023-5525MEDIUMLimit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-UpdateEPSS 0.5%CVE-2026-13597CRITICALQRcode Login for WeChat <= 1.3 - Unauthenticated Account TakeoverEPSS 0.5%CVE-2026-84099HIGHIDB Ecommerce (wpStoreCart 5) <= 5.0.7 - Unauthenticated PHP Object Injection via bundled wpsc-membership-pro paypal.phpEPSS 0.5%