Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-1528—VikBooking < 1.5.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1673—WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout pageEPSS 0.8%CVE-2022-1218—Domain Replace <= 1.3.8 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1217—Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1047—Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1216—Advanced Image Sitemap <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0626—Advanced Admin Search < 1.1.6 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1582—External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-1268—Donate Extra <= 2.02 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1470—Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1547—Check & Log email < 1.0.6 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1455—Call Now Button < 1.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1546—WooCommerce - Product Importer <= 1.5.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1425—WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOREPSS 0.8%CVE-2023-3279MEDIUMNextGEN Gallery < 3.39 - Admin+ Local File InclusionEPSS 0.8%CVE-2023-0279HIGHMedia Library Assistant < 3.06 - Admin+ SQLiEPSS 0.8%CVE-2023-1427MEDIUMPhoto Gallery by 10Web < 1.8.15 - Admin+ Path TraversalEPSS 0.8%CVE-2021-24859—User Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata AccessEPSS 0.8%CVE-2022-1951—Core Plugin for Kitestudio Themes < 2.3.1 - Reflected Cross-Site-ScriptingEPSS 0.8%CVE-2021-24733—WP Post Page Clone < 1.2 - Unauthorised Post AccessEPSS 0.8%