Vulnerabilities in unknown

5,484 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24506—Slider Hero < 8.2.7 - Contributor+ SQL InjectionEPSS 1.4%CVE-2021-24755—myCred < 2.3 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24748—Email Before Download < 6.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2021-24575—WPSchoolPress < 2.1.10 - Multiple Authenticated SQL InjectionsEPSS 1.4%CVE-2021-24847—SEO Redirection < 8.2 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24829—Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24692—Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path TraversalEPSS 1.4%CVE-2021-25075—Duplicate Page or Post < 1.5.1 - Arbitrary Settings Update to Stored XSSEPSS 1.4%CVE-2021-25030—Events Made Easy < 2.2.36 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2022-2168—Download Manager < 3.2.44 - Reflected Cross-Site ScriptingEPSS 1.4%CVE-2022-4061HIGHJobBoardWP < 1.2.2 - Unauthenticated Arbitrary File UploadEPSS 1.4%CVE-2026-12898MEDIUMAll-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path TraversalEPSS 1.4%CVE-2023-0236MEDIUMTutor LMS < 2.0.10 - Reflected Cross-Site ScriptingEPSS 1.3%CVE-2021-24957—Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injectionEPSS 1.3%CVE-2021-24556—Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)EPSS 1.3%CVE-2021-24497—Giveaway <= 1.2.2 - Authenticated SQL InjectionEPSS 1.3%CVE-2022-2352HIGHPost SMTP < 2.1.7 - Admin+ Blind SSRFEPSS 1.3%CVE-2021-24508—Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSSEPSS 1.3%CVE-2021-24662—Game Server Status <= 1.0 - Admin+ SQL InjectionEPSS 1.3%CVE-2023-2252LOWDirectorist < 7.5.4 - Admin+ LFIEPSS 1.3%