Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24333—Content Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-25040—Booking Calendar < 8.9.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25039—Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24578—SportsPress < 2.7.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24874—Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24921—Advanced Database Cleaner < 3.0.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0347—LoginPress < 1.5.12 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24924—Email Log < 2.4.8 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0627—Amelia < 1.0.46 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0503—Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0314—Nimble Page Builder < 3.2.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25012—Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24996—IDPay for Contact Form 7 <= 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-4108MEDIUMWholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File DownloadEPSS 0.8%CVE-2022-4794HIGHAAWP < 3.12.3 - Unsafe URL HandlingEPSS 0.8%CVE-2024-6695CRITICALprofile-builder <= 3.11.8 - Unauthenticated Privilege EscalationEPSS 0.8%CVE-2022-1687—Logo Slider <= 1.4.8 - Admin+ SQLiEPSS 0.8%CVE-2023-1426MEDIUMWP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title DisclosureEPSS 0.8%CVE-2022-4236MEDIUMWelcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File AccessEPSS 0.8%CVE-2022-0327—Master Addons for Elementor < 1.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%