Vulnerabilities in unknown

5,484 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-3989HIGHMotors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File UploadEPSS 1.1%CVE-2021-24757—Stylish Price List < 6.9.0 - Unauthenticated Arbitrary Image UploadEPSS 1.1%CVE-2022-1540HIGHPostmagThemes Demo <= 1.0.7 - Admin+ Arbitrary File UploadEPSS 1.1%CVE-2022-0404—Material Design for Contact Form 7 <= 2.6.4 - Subscriber+ Arbitrary Settings Update leading to DoSEPSS 1.1%CVE-2022-4445CRITICALFL3R FeelBox <= 8.1 - Unauthenticated SQLiEPSS 1.1%CVE-2021-25065—Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 1.0%CVE-2023-5105—Frontend File Manager < 22.6 - Editor+ Arbitrary File DownloadEPSS 1.0%CVE-2021-25096—IP2Location Country Blocker < 2.26.5 - Ban BypassEPSS 1.0%CVE-2023-0340HIGHCustom Content Shortcode <= 4.0.2 - Contributor+ LFIEPSS 1.0%CVE-2022-4323HIGHGoogle Analyticator < 6.5.6 - Admin+ PHP Object InjectionEPSS 1.0%CVE-2022-4680HIGHRevive Old Posts – Social Media Auto Post and Scheduling Plugin < 9.0.11 - PHP Object InjectionEPSS 1.0%CVE-2023-3211CRITICALWordPress Database Administrator <= 1.0.3 - Unauthenticated SQL Injection EPSS 1.0%CVE-2022-3425HIGHGoogle Analyticator < 6.5.6 - Admin+ PHP Object InjectionEPSS 1.0%CVE-2023-4460MEDIUMUploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVGEPSS 1.0%CVE-2021-24655—WP User Manager < 2.6.3 - Arbitrary User Password Reset to Account CompromiseEPSS 1.0%CVE-2022-3720HIGHEvent Monster < 1.2.1 - Admin+ SQLiEPSS 1.0%CVE-2022-4099CRITICALJoy Of Text Lite < 2.3.1 - Unauthenticated SQLiEPSS 1.0%CVE-2022-4383CRITICALCBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLiEPSS 1.0%CVE-2022-3241CRITICALBuild App Online < 1.0.19 - Unauthenticated SQL InjectionEPSS 1.0%CVE-2022-1320—Sliderby10Web < 1.2.52 - Admin+ Stored Cross-Site ScriptingEPSS 1.0%