Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-0720—Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data DisclosureEPSS 0.6%CVE-2026-11883HIGHWebAuthn Provider for Two Factor < 2.5.6 - 2FA BypassEPSS 0.6%CVE-2022-0837—Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data DisclosureEPSS 0.6%CVE-2023-6627MEDIUMWP Go Maps < 9.0.28 - Unauthenticated Stored XSSEPSS 0.6%CVE-2021-24704—Orange Form <= 1.0 - SQL Injection via CSRFEPSS 0.6%CVE-2022-2116—Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-2378—Easy Student Results <= 2.2.8 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-24665—WP Video Lightbox < 1.9.3 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2386—Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-3392MEDIUMWP Humans.txt <= 1.0.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24667—Gallery Blocks with Lightbox < 2.2.1- Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24381—NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24515—Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-12878HIGHCustom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSSEPSS 0.6%CVE-2021-24737—Comments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24882—Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24656—Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24709—Weather Effect < 1.3.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24623—WordPress Advanced Ticket System < 1.0.64 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24440—Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%