Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2024-1068HIGH404 Solution < 2.35.8 - Admin+ SQL InjectionEPSS 0.8%CVE-2023-5949—SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post DisclosureEPSS 0.8%CVE-2023-2623—KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information DisclosureEPSS 0.8%CVE-2022-2341—Simple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2024-9422MEDIUMGEO My WordPress < 4.5 - Admin+ Arbitrary File UploadEPSS 0.8%CVE-2022-2340—W-DALIL <= 2.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-1772—Google Places Review < 2.0.0 - Admin+ Stored Cross Site ScriptingEPSS 0.8%CVE-2021-25103—GTranslate < 2.9.7 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25102—All In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-2111MEDIUMHollerBox < 2.1.4 - Admin+ SQL InjectionEPSS 0.8%CVE-2021-24205—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box WidgetEPSS 0.8%CVE-2022-3912HIGHUser Registration < 2.2.4.1 - Subscriber+ Arbitrary File UploadEPSS 0.8%CVE-2022-3511MEDIUMAwesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets DownloadEPSS 0.7%CVE-2021-24147—Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2021-24455—Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2024-3822MEDIUMBase64 Encoder/Decoder <= 0.9.2 - Reflected XSSEPSS 0.7%CVE-2021-24201—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column ElementEPSS 0.7%CVE-2021-24203—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider WidgetEPSS 0.7%CVE-2021-24204—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion WidgetEPSS 0.7%CVE-2021-24202—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading WidgetEPSS 0.7%