Vulnerabilities in unknown

5,484 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-1557—ULeak Security & Monitoring <= 1.2.3 - Subscriber+ Stored Cross-Site ScriptingEPSS 1.1%CVE-2022-2089—Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site ScriptingEPSS 1.1%CVE-2021-24153—Yoast SEO < 3.4.1 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 1.1%CVE-2021-25023—Speed Booster Pack < 4.3.3.1 - Admin+ SQL InjectionEPSS 1.1%CVE-2021-24353—Simple 301 Redirects by BetterLinks - 2.0.0 – 2.0.3 - Unauthenticated Redirect ImportEPSS 1.1%CVE-2022-2222—Download Monitor < 4.5.91 - Admin+ Arbitrary File DownloadEPSS 1.1%CVE-2021-24359—The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email SendingEPSS 1.1%CVE-2021-24985—Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site ScriptingEPSS 1.1%CVE-2024-6845MEDIUMSmartSearchWP < 2.4.6 - Unauthenticated OpenAI Key DisclosureEPSS 1.1%CVE-2022-2392—Lana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File DownloadEPSS 1.1%CVE-2023-5041HIGHTrack The Click < 0.3.12 - Author+ Time-Based Blind SQL InjectionEPSS 1.1%CVE-2022-3302HIGHAnti-Spam by CleanTalk < 5.185.1 - Admin+ SQLiEPSS 1.1%CVE-2022-4351HIGHQe SEO Handyman <= 1.0 - Admin+ SQLiEPSS 1.1%CVE-2022-4360HIGHWP RSS By Publishers <= 0.1 - Admin+ SQLiEPSS 1.1%CVE-2023-5673—WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCEEPSS 1.1%CVE-2023-0255HIGHEnable Media Replace < 4.0.2 - Author+ Arbitrary File UploadEPSS 1.1%CVE-2022-1585—Project Source Code Download <= 1.0.0 - Unauthenticated Backup DownloadEPSS 1.1%CVE-2023-6140HIGHEssential Real Estate < 4.4 - Subscriber+ Arbitrary File UploadEPSS 1.1%CVE-2024-6164CRITICALFilter & Grids < 2.8.33 - Unauthenticated LFIEPSS 1.1%CVE-2023-2518MEDIUMEasy Forms for Mailchimp < 6.8.9 - Reflected XSSEPSS 1.1%