Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-4643HIGHEnable Media Replace < 4.1.3 - Author+ PHP Object InjectionEPSS 0.8%CVE-2022-2834MEDIUMHelpful < 4.5.26 - Information DisclosureEPSS 0.8%CVE-2023-3604HIGHChange WP Admin < 1.1.4 - Secret Login Page DisclosureEPSS 0.8%CVE-2022-3694HIGHSyncee - Global Dropshipping < 1.0.10 - Authentication Token DisclosureEPSS 0.8%CVE-2022-2891—WP 2FA < 2.3.0 - Time-Based Side-Channel AttackEPSS 0.8%CVE-2021-25006—MOLIE <= 0.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2026-15039CRITICALGift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2026-19089CRITICALProduct Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2026-16618CRITICALImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code ExecutionEPSS 0.8%CVE-2026-14812CRITICALPremium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content Injection)EPSS 0.8%CVE-2026-16250CRITICALPersonal QR Message <= 1.0 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2026-13714CRITICALRealtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code ExecutionEPSS 0.8%CVE-2021-24679—Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24496—Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24798—WP Header Images < 2.0.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24438—ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24373—WP Hardening < 1.2.2 - Reflected XSS via historyvalueEPSS 0.8%CVE-2021-24437—Favicon by RealFaviconGenerator <= 1.3.20 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24632—Recipe Card Blocks < 2.8.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24676—Better Find and Replace < 1.2.9 - Reflected Cross-Site ScriptingEPSS 0.8%