Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-2482—Responsive CSS EDITOR <= 1.0 - Admin+ SQLiEPSS 0.9%CVE-2023-2122—Image Optimizer by 10web < 1.0.27 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2022-1527—WP 2FA < 2.2.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1532—Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-0331HIGHCorreos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File DownloadEPSS 0.8%CVE-2022-1465—WPC Smart Wishlist for WooCommerce < 2.9.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2026-16258CRITICALAjax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST EndpointEPSS 0.8%CVE-2022-1474—WP Event Manager < 3.1.28 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1604—MailerLite < 1.5.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2024-7714MEDIUMAI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX CallsEPSS 0.8%CVE-2022-1267—BMI BMR Calculator <= 1.3 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25109—Futurio Extra < 1.6.3 - Authenticated SQL InjectionEPSS 0.8%CVE-2022-4155MEDIUMContest Gallery < 19.1.5 - Admin+ SQL InjectionEPSS 0.8%CVE-2023-2309—wpForo Forum < 2.1.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-4148MEDIUMDitty < 3.1.25 - Reflected XSSEPSS 0.8%CVE-2026-16060CRITICALInsert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File UploadEPSS 0.8%CVE-2022-4306MEDIUMPanda Pods Repeater Field < 1.5.4 - Reflected XSSEPSS 0.8%CVE-2023-6030MEDIUMLogDash Activity Log < 1.1.4 - Unauthenticated SQLiEPSS 0.8%CVE-2022-2407—WP phpMyAdmin < 5.2.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2024-13627MEDIUMWP Touch Slider <= 2.2 - Reflected XSSEPSS 0.8%