Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24588—SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site ScriptingEPSS 0.8%CVE-2021-24496—Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24632—Recipe Card Blocks < 2.8.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24679—Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24438—ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2026-82923CRITICALAI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST RoutesEPSS 0.8%CVE-2021-24783—Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule DeletionEPSS 0.8%CVE-2023-2009MEDIUMPretty Url <= 1.5.4 - Admin+ Stored XSS in plugin settingsEPSS 0.8%CVE-2021-24983—Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX ActionEPSS 0.8%CVE-2023-0940HIGHProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password ResetEPSS 0.8%CVE-2023-1977—Booking Manager < 2.0.29 - Subscriber+ SSRFEPSS 0.8%CVE-2023-4019HIGHMedia from FTP < 11.17 - Author+ Arbitrary File AccessEPSS 0.8%CVE-2026-76550HIGHWP Import Export Lite < 3.9.34 - Authenticated RCE via Export Template Path TraversalEPSS 0.8%CVE-2026-76551HIGHWP Import Export Lite < 3.9.33 - Authenticated RCE via Export Field PHP FunctionEPSS 0.8%CVE-2021-24136—Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSSEPSS 0.8%CVE-2021-24297—Goto < 2.1 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2026-84738CRITICALAF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCEEPSS 0.8%CVE-2021-24555—Diary & Availability Calendar <= 1.0.3 - Authenticated (subscriber+) SQL InjectionEPSS 0.8%CVE-2023-4294MEDIUMURL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer headerEPSS 0.8%CVE-2023-0812HIGHActive Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data DisclosureEPSS 0.8%