Vulnerabilities in unknown

5,533 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2024-6723MEDIUMAI Engine < 2.4.8 - Admin+ SQLiEPSS 0.4%CVE-2021-24749—URL Shortify < 1.5.1 - Arbitrary Link/Group Deletion via CSRFEPSS 0.4%CVE-2021-24832—WP SEO Redirect 301 < 2.3.2 - Redirect Deletion via CSRFEPSS 0.4%CVE-2026-85127HIGHVikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat AttachmentEPSS 0.4%CVE-2021-24801—WP Survey Plus <= 1.0 - Subscriber+ AJAX CallsEPSS 0.4%CVE-2023-5874—Popup box < 3.8.6 - Admin+ Stored XSS in Popup SettingsEPSS 0.4%CVE-2023-5971MEDIUMSave as PDF < 3.2.0 - Admin+ Stored XSSEPSS 0.4%CVE-2026-19728HIGHExtra Product Options Builder for WooCommerce < 1.2.176 - Unauthenticated Customer File Disclosure via getpublicfileuploadEPSS 0.4%CVE-2024-6133MEDIUMWP eStore < 8.5.6 - Reflected XSS in Customer SearchEPSS 0.4%CVE-2021-24380—Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRFEPSS 0.4%CVE-2026-3220HIGHMultiple Plugins - Unauthenticated Stored XSS via Minify LibraryEPSS 0.4%CVE-2026-81737HIGHFAQ Builder AYS 1.6.3 - 1.8.4 - Unauthenticated Stored XSS via ays_get_user_informationEPSS 0.4%CVE-2023-5809—Popup box < 3.8.6 - Admin+ Stored XSS in CategoriesEPSS 0.4%CVE-2026-13609HIGHFrontend Admin by DynamiApps < 3.29.9 - Unauthenticated Stored Cross-Site Scripting via Form FieldEPSS 0.4%CVE-2021-24776—WP Performance Score Booster < 2.1 - Settings Change via CSRFEPSS 0.4%CVE-2024-4704MEDIUM Contact Form 7 < 5.9.5 - Unauthenticated Open RedirectEPSS 0.4%CVE-2021-24432MEDIUMAdvanced AJAX Product Filters < 1.5.4.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)EPSS 0.4%CVE-2023-5237MEDIUMMemberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2023-2995MEDIUMLeyka < 3.30.4 - Admin+ Stored XSSEPSS 0.4%CVE-2026-18653HIGHWP Directory Kit < 1.5.7 - Admin+ SQL Injection via section ParameterEPSS 0.4%