Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24817—Ultimate NoFollow <= 1.4.8 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24897—Add Subtitle <= 1.1.0 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24930—Bookly < 20.3.1 - Staff Member Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0450—Menu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24855—Display Post Metadata < 1.5.0 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0205—YOP Poll < 6.3.5 - Author+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24826—Custom Content Shortcode < 4.0.2 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2023-6585HIGHJobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCEEPSS 0.6%CVE-2022-0209MEDIUMMitsol Social Post Feed < 1.11 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1758—Genki Pre-Publish Reminder <= 1.4.1 - Stored XSS & RCE via CSRFEPSS 0.6%CVE-2022-1589—Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings UpdateEPSS 0.6%CVE-2024-13630MEDIUMNews List <= 1.0 - Reflected XSSEPSS 0.6%CVE-2024-12737MEDIUMWP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSSEPSS 0.6%CVE-2022-2543—Visual Portfolio < 2.18.0 - Unauthenticated CSS InjectionEPSS 0.6%CVE-2022-4198MEDIUMWP Social Sharing <= 2.2 - Admin+ Stored XSSEPSS 0.6%CVE-2021-25090—GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24958—Meks Easy Photo Feed Widget < 1.2.4 - Subscriber+ Settings Update to Stored XSSEPSS 0.6%CVE-2021-24969—Download Manager < 3.2.22 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1152—Menubar < 5.8 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-25060—Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSSEPSS 0.6%