Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-4340MEDIUMBookingPress < 1.0.31 - Unauthenticated IDOR in appointment_idEPSS 0.7%CVE-2020-36504—WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRFEPSS 0.7%CVE-2021-24502—WP Google Map < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2022-3070MEDIUMGenerate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24856—Shared Files < 1.6.61 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-4657MEDIUMRestaurant Menu < 2.3.6 - Contributor+ Stored XSS via ShortcodeEPSS 0.7%CVE-2022-1334—WP YouTube Live < 1.8.3 - Admin+ Stored Cross Site ScriptingEPSS 0.7%CVE-2022-1990—Nested Pages < 3.1.21 - Admin+ Stored Cross Site ScriptingEPSS 0.7%CVE-2022-1566—Quotes llama < 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-1010—Login using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-2537—WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2022-2538—WP Hide & Security Enhancer < 1.8 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2026-74851HIGHPods < 3.3.9.1 - Author+ RCE via Shortcode Display CallbackEPSS 0.7%CVE-2021-25059MEDIUMDownload Plugin < 2.0.0 - Subscriber+ Website DownloadEPSS 0.7%CVE-2026-13392HIGHElementsKit Lite < 3.10.01 - Subsite Administrator+ PHP Code Injection via Custom Widget Builder (Multisite)EPSS 0.7%CVE-2023-6077—Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post AccessEPSS 0.7%CVE-2023-2117LOWImage Optimizer by 10web < 1.0.27 - Admin+ Path TraversalEPSS 0.7%CVE-2026-19221HIGHForminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on MultisiteEPSS 0.7%CVE-2023-4216LOWOrders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/ReadEPSS 0.7%CVE-2024-2761MEDIUMGenesis Blocks < 3.1.3 - Contributor+ Stored XSSEPSS 0.7%