Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-2532—Feed Them Social < 3.0.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-5906—Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data ExposureEPSS 0.8%CVE-2022-1788—Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRFEPSS 0.8%CVE-2022-2556—MailChimp for Woocommerce < 2.7.2 - Admin+ SSRFEPSS 0.8%CVE-2023-2713CRITICALIDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.EPSS 0.8%CVE-2023-0278HIGHGeoDirectory < 2.2.24 - Admin+ SQLiEPSS 0.8%CVE-2021-24661—PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content DisclosureEPSS 0.8%CVE-2022-3359HIGHShortcodes and extra features for Phlox theme < 2.10.7 - PHP Objection InjectionEPSS 0.8%CVE-2022-3981HIGHIcegram Express < 5.5.1 - Subscriber+ SQLiEPSS 0.8%CVE-2022-4512MEDIUMBetter Font Awesome < 2.0.4 - Contributor+ Stored XSSEPSS 0.8%CVE-2024-5882HIGHUltimate Classified Listings < 1.3 - Unauthenticated LFIEPSS 0.8%CVE-2026-8386MEDIUMWP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker IDEPSS 0.8%CVE-2021-24504—WP LMS <= 1.1.2 - Stored Cross-Site Scripting (XSS)EPSS 0.8%CVE-2023-4284—Post Timeline < 2.2.6 - Reflected XSSEPSS 0.8%CVE-2026-15038CRITICALInfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on MultisiteEPSS 0.8%CVE-2021-24841—Helpful < 4.4.59 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-2913MEDIUMLogin No Captcha reCAPTCHA < 1.7 - IP Check BypassEPSS 0.8%CVE-2021-24999—Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing ModuleEPSS 0.8%CVE-2021-25000—Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General ModuleEPSS 0.8%CVE-2021-25001—Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds ModuleEPSS 0.8%