Vulnerabilities in unknown

5,492 results
Vexday analysis

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24230—Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User MetaEPSS 0.6%CVE-2021-24902—Typebot < 1.4.3 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24810—WP Event Manager < 3.1.23 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25029—Cluevo < 1.8.1 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-0662—Adrotate < 5.8.23 - Admin+ XSS via Advert NameEPSS 0.6%CVE-2022-0649—Adrotate < 5.8.23 - Admin+ XSS via Group NameEPSS 0.6%CVE-2022-1046—Visual Form Builder < 3.0.7 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24903—GRAND FlaGallery <= 6.1.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1088—Page Security & Membership <= 1.5.15 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24944—Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1156—Books & Papers <= 0.20210223 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2426—Thinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2410—mTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-2425—WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2372—YaySMTP < 2.2.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2423—DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2152—Duplicate Page and Post Plugin < 2.8 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2411—Auto More Tag <= 4.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2412—Better Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2409—Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%