Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24613—Post Views Counter < 1.3.5 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24485—Special Text Boxes < 5.9.110 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24381—NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24700—Forminator < 1.15.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24708—WP All Export < 1.3.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24785—Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24787—Client Invoicing by Sprout Invoices < 19.9.7 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24811—Shop Page WP < 1.2.8 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24600—WP Dialog <= 1.2.5.5 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24609—WP Mapa Politico Espana < 3.7.0- Authenticated Stored XSSEPSS 0.6%CVE-2021-24514—Visual Form Builder < 3.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24768—WP RSS Aggregator < 4.19.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24744—WordPress Contact Forms by Cimatti < 1.4.12 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-12585MEDIUMPropertyHive < 2.1.1 - Reflected XSSEPSS 0.6%CVE-2023-3814MEDIUMAdvanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder AccessEPSS 0.6%CVE-2023-7199MEDIUMRelevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post DisclosureEPSS 0.6%CVE-2022-1094MEDIUMAmr Users < 4.59.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1765—Hot Linked Image Cacher <= 1.16 - Image upload/cache abuse via CSRFEPSS 0.6%CVE-2022-1611—Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRFEPSS 0.6%CVE-2021-24423—UpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%