Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24326—All 404 Redirect to Homepage < 1.21 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24464—YouTube Embed, Playlist and Popup < 2.3.9 - Contributor+ Stored XSSEPSS 0.6%CVE-2021-24547—KN Fix Your Title <= 1.0.1 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24654—User Registration < 2.0.2 - Low Privilege Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24232—Advanced Booking Calendar < 1.6.8 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24587—Splash Header < 1.20.8 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24523—Daily Prayer Time < 2021.08.10 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24548—Mimetic Books <= 0.2.13 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24691—Quiz And Survey Master < 7.3.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24593—Business Hours Indicator < 2.3.5 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24544—Responsive WordPress Slider <= 2.2.0 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24529—Grid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS)EPSS 0.6%CVE-2021-24476—Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24367—WP Config File Editor <= 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2023-5530—Ninja Forms < 3.6.34 - Admin+ Stored XSSEPSS 0.6%CVE-2023-0443MEDIUMAnyWhere Elementor < 1.2.8 - Freemius API Key DisclosureEPSS 0.6%CVE-2021-24478—Bookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24927—My Calendar < 3.2.18 - Subscriber+ Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-24605—Custom Post View Generator <= 0.4.6 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-24443—Youzify < 1.0.7 - Stored Cross-Site Scripting via BiographyEPSS 0.6%