Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24614—Book appointment Online < 1.39 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24592—Sitewide Notice WP < 2.3 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24621—WP Courses LMS < 2.0.44 - Authenticated Stored XSS via Video Embed CodeEPSS 0.6%CVE-2021-24673—Appointment Hour Booking < 1.3.16 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24623—WordPress Advanced Ticket System < 1.0.64 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24613—Post Views Counter < 1.3.5 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24485—Special Text Boxes < 5.9.110 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24378—Autoptimize < 2.7.8 - Authenticated Stored XSS via File UploadEPSS 0.6%CVE-2021-24701—Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24882—Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24607—Storefront Footer Text <= 1.0.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24530—Alojapro Widget <= 1.1.15 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24569—Cookie Notice & Compliance for GDPR / CCPA < 2.1.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24440—Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24604—Availability Calendar < 1.2.2 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24646—Booking.com Banner Creator < 1.4.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24815—Paypal Donation < 1.3.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24524—GiveWP < 2.12.0 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24709—Weather Effect < 1.3.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24687—Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%