Vulnerabilities in unknown

4,715 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24563—Frontend Uploader <= 1.3.2 - Unauthenticated Stored Cross-Site ScriptingEPSS 26.4%CVE-2022-1020—Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function CallEPSS 25.9%CVE-2023-5003HIGHActive Directory Integration < 4.1.10 - Unauthenticated Log DisclosureEPSS 25.9%CVE-2023-6389MEDIUMWordPress Toolbar <= 2.2.6 - Open RedirectEPSS 25.7%CVE-2021-24891—Elementor < 3.4.8 - DOM Cross-Site-ScriptingEPSS 25.1%CVE-2023-0552MEDIUMPie Register < 3.8.2.3 - Open RedirectEPSS 24.3%CVE-2022-0863—WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE)EPSS 24.1%CVE-2021-24209—WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)EPSS 23.8%CVE-2022-1952—eaSYNC < 1.1.16 - Unauthenticated Arbitrary File UploadEPSS 23.5%CVE-2022-1281—Photo Gallery < 1.6.3 - Unauthenticated SQL InjectionEPSS 23.2%CVE-2023-2877—Formidable Forms < 6.3.1 - Subscriber+ Remote Code ExecutionEPSS 22.5%CVE-2022-1390—Admin Word Count Column <= 2.2 - Unauthenticated Arbitrary File ReadEPSS 21.9%CVE-2022-3921CRITICALListingo < 3.2.7 - Unauthenticated Arbitrary File UploadEPSS 21.2%CVE-2025-9501CRITICALW3 Total Cache < 2.8.13 - Unauthenticated Command InjectionEPSS 20.5%CVE-2022-1556—StaffList < 3.1.5 - Admin+ SQLiEPSS 20.4%CVE-2022-0591—Formcraft3 < 3.8.28 - Unauthenticated SSRFEPSS 20.2%CVE-2023-0156MEDIUMAll-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via TraversalEPSS 19.9%CVE-2023-0329HIGHElementor Website Builder < 3.12.2 - Admin+ SQLiEPSS 19.7%CVE-2022-2863—WPvivid Backup < 0.9.76 - Admin+ Arbitrary File ReadEPSS 19.6%CVE-2022-3900CRITICALCooked Pro < 1.7.5.7 - Unauthenticated PHP Object InjectionEPSS 19.0%