Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-25100—Give < 2.17.3 - Reflected Cross-Site Scripting via Donation Forms DashboardEPSS 0.9%CVE-2022-23912—AP Custom Testimonial < 1.4.8 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2022-1169—Careerfy < 3.9.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)EPSS 0.9%CVE-2022-0780—SearchIQ < 3.9 - Unauthenticated Stored XSSEPSS 0.9%CVE-2022-0252—Give < 2.17.3 - Reflected Cross-Site Scripting via Import ToolEPSS 0.9%CVE-2023-2180HIGHKIWIZ Invoices Certification & PDF System <= 2.1.3 - Unauthenticated Arbitrary File DownloadEPSS 0.9%CVE-2022-0680—Plezi < 1.0.3 - Unauthenticated Stored XSSEPSS 0.9%CVE-2022-0640—AP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2022-0628—AP Mega Menu < 3.0.8 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2022-0818—Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSSEPSS 0.9%CVE-2021-24935—WP Google Fonts < 3.1.5 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2026-16051CRITICALWPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install ActionEPSS 0.9%CVE-2021-24742—Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings UpdateEPSS 0.9%CVE-2022-4897MEDIUMBackupBuddy < 8.8.3 - Multiple Reflected Cross-Site ScriptingEPSS 0.9%CVE-2022-4106HIGHWholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File DownloadEPSS 0.9%CVE-2022-2554—Enable Media Replace < 4.0.0 - Admin+ Path TraversalEPSS 0.9%CVE-2021-24599—Email Encoder < 2.1.2 - Reflected Cross Site ScriptingEPSS 0.9%CVE-2022-4159MEDIUMContest Gallery < 19.1.5.1 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4161MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4150MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%