Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24622—WP Ticket < 5.10.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24612—Sociable <= 4.3.4.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24489—Request a Quote < 2.3.9 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24624—MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site ScriptingEPSS 0.6%CVE-2021-24793—WPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24736—Shared Files < 1.6.57 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24722—Restaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24789—Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24740—Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24715—WP Sitemap Page < 1.7.0 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-4310MEDIUMSlimstat Analytics < 4.9.3 - Unauthenticated Stored XSSEPSS 0.6%CVE-2022-2763—WP Socializer < 7.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-0365MEDIUMFancy Product Designer < 6.1.5 - Admin+ SQL InjectionEPSS 0.6%CVE-2022-0447—Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_typesEPSS 0.6%CVE-2026-1540HIGHSpam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code ExecutionEPSS 0.6%CVE-2024-12274HIGHBookingPress < 1.1.23 - Unauthenticated Export File DownloadEPSS 0.6%CVE-2021-24487—St Daily Tip <= 4.7 - CSRF to Stored Cross-Site ScriptingEPSS 0.6%CVE-2026-82845CRITICALMasteriyo LMS < 3.4.1 - Subscriber+ PHP Object InjectionEPSS 0.6%CVE-2022-1755MEDIUMSVG Support < 2.5 - Author+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24516—PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%