Vulnerabilities in unknown

5,484 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-22735—Simple Quotation <= 1.3.2 - Subscriber+ SQL injectionEPSS 1.3%CVE-2021-24952—Conversios.io < 4.6.2 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2022-0410—WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-25054—WPcalc <= 2.1 - Authenticated SQL InjectionEPSS 1.3%CVE-2021-24846—Ni WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-24848—Mediamatic < 2.8.1 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-24860—BSK PDF Manager < 3.1.2 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-1583—External Links in New Window / New Tab < 1.43 - TabnabbingEPSS 1.3%CVE-2021-24889—Ninja Forms < 3.6.4 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24774—Check & Log Email < 1.0.3 - Admin+ SQL InjectionsEPSS 1.3%CVE-2021-24858—WP Cookie User Info < 1.0.9 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24566HIGHWooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File InclusionEPSS 1.3%CVE-2022-3600CRITICALEasy Digital Downloads < 3.1.0.2 - Unauthenticated CSV InjectionEPSS 1.3%CVE-2021-24973—Site Reviews < 5.17.3 - Unauthenticated Stored Cross-Site ScriptingEPSS 1.3%CVE-2022-4489HIGHWOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object InjectionEPSS 1.3%CVE-2022-0887—Easy Social Icons < 3.1.4 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-0255—Database Backup for WordPress < 2.5.1 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24441—Sign-up Sheets < 1.0.14 - Authenticated CSV InjectionEPSS 1.3%CVE-2021-24350—Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)EPSS 1.3%CVE-2022-1977—WP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRFEPSS 1.3%