Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24986—Post Grid < 2.1.16 - Reflected Cross-Site Scripting via keywordEPSS 0.8%CVE-2022-0648—Team Circle Image Slider With Lightbox < 1.0.16 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0449—Flexi - Guest Submit < 4.20 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0647—Bulk Creator <= 1.0.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24578—SportsPress < 2.7.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25034—WP User < 7.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0825—Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status UpdateEPSS 0.8%CVE-2022-0641—Popup Like box < 3.6.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-46781—Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0531—WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25071—Akismet Privacy Policies <= 2.0.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25012—Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24980—Gwolle Guestbook < 4.2.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24937—Asset CleanUp < 1.3.8.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1164—Wyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2022-0600—Conference Scheduler < 2.4.3 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25019—SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25047—10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2022-0619—Database Peek <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24996—IDPay for Contact Form 7 <= 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%