Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-1427MEDIUMPhoto Gallery by 10Web < 1.8.15 - Admin+ Path TraversalEPSS 0.8%CVE-2023-6113HIGHWP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup DownloadEPSS 0.8%CVE-2021-24873—Tutor LMS < 1.9.11 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24908—Check & Log Email < 1.0.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-2083—Simple Single Sign On <= 4.1.0 - Authentication BypassEPSS 0.8%CVE-2022-0287—Mycred < 2.4.4.1 - Subscriber+ User E-mail Addresses DisclosureEPSS 0.8%CVE-2023-0772MEDIUMPopup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content DisclosureEPSS 0.8%CVE-2023-6203—The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post ReadEPSS 0.8%CVE-2021-24473—User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOREPSS 0.8%CVE-2022-1600—YOP Poll < 6.4.3 - IP SpoofingEPSS 0.8%CVE-2024-6536MEDIUMZephyr Project Manager < 3.3.99 - Editor+ XSSEPSS 0.8%CVE-2022-2090—Woo Discount Rules < 2.4.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-2173—Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-2178—Aajoda Testimonials < 2.2.2 - Admin+ Stored XSSEPSS 0.8%CVE-2021-25051—Modal Window < 5.2.2 - RFI leading to RCE via CSRFEPSS 0.8%CVE-2021-24151HIGHWP Editor < 1.2.7 - Authenticated SQL injectionEPSS 0.8%CVE-2022-3994MEDIUMAuthenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token DisclosureEPSS 0.8%CVE-2021-24905—Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File DeletionEPSS 0.8%CVE-2024-0780HIGHEnjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database ResetEPSS 0.8%CVE-2021-24617—GamePress <= 1.1.0 - Reflected Cross-Site ScriptingEPSS 0.8%