Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-1689—Note Press <= 0.1.10 - Admin+ SQLi via UpdateEPSS 0.8%CVE-2021-24938—WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0327—Master Addons for Elementor < 1.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1686—Five Minute Webshop <= 1.3.2 - Admin+ SQLi via idEPSS 0.8%CVE-2022-1688—Note Press <= 0.1.10 - Admin+ SQLi via idEPSS 0.8%CVE-2022-4236MEDIUMWelcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File AccessEPSS 0.8%CVE-2021-24925—Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0321—WP Voting Contest < 3.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24824—Custom Content Shortcode < 4.0.1 - Unauthorised Arbitrary Post Metadata AccessEPSS 0.8%CVE-2022-2080—Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOREPSS 0.8%CVE-2021-24781—Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value ChangeEPSS 0.8%CVE-2022-3846HIGHWorkreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOREPSS 0.8%CVE-2022-0625—Admin Menu Editor <= 1.0.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1216—Advanced Image Sitemap <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1436—WPCargo Track & Trace < 6.9.5 - Reflected Cross Site ScriptingEPSS 0.8%CVE-2022-1009—Smush < 3.9.9 - Admin+ Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1171—Vertical scroll recent post < 14.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1470—Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1217—Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1220—FoxyShop < 4.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%