Vulnerabilidades en Unknown
5428 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-0228—Popup Builder < 4.0.7 - Admin+ SQL InjectionEPSS 5.9%CVE-2022-0448—CP Blocks < 1.0.15 - Admin+ Stored Cross-Site ScriptingEPSS 5.7%CVE-2021-25118—Yoast SEO 16.7-17.2 - Unauthenticated Full Path DisclosureEPSS 5.6%CVE-2021-24741—Support Board < 3.3.4 - Multiple Unauthenticated SQL InjectionsEPSS 5.6%CVE-2024-3673CRITICALWeb Directory Free < 1.7.3 - Unauthenticated LFIEPSS 5.6%CVE-2021-24139—Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL InjectionEPSS 5.5%CVE-2022-1950—Youzify < 1.2.0 - Unauthenticated SQLiEPSS 5.5%CVE-2023-3077—MStore API < 3.9.8 - Unauthenticated Blind SQLiEPSS 5.5%CVE-2022-3254CRITICALAWP Classifieds Plugin < 4.3 - Unauthenticated SQLiEPSS 5.5%CVE-2021-24610—TranslatePress < 2.0.9 - Authenticated Stored Cross-Site ScriptingEPSS 5.4%CVE-2021-24226—AccessAlly < 3.5.7 - $_SERVER Superglobal LeakageEPSS 5.4%CVE-2022-1598—WPQA < 5.5 - Unauthenticated Private Message DisclosureEPSS 5.4%CVE-2021-25082—Popup Builder < 4.0.7 - LFI to RCEEPSS 5.2%CVE-2021-24791—Header Footer Code Manager < 1.1.14 - Admin+ SQL InjectionsEPSS 5.2%CVE-2021-24966—Error Log Viewer Plugin <= 1.1.1 - Admin+ Arbitrary File ClearingEPSS 5.2%CVE-2023-0630—Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL InjectionEPSS 5.1%CVE-2022-3141—Translatepress Multilinugal < 2.3.3 - Admin+ SQLiEPSS 5.1%CVE-2021-24901—Security Audit <= 1.0.0 - Admin+ Stored Cross Site ScriptingEPSS 5.1%CVE-2021-24904—Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site ScriptingEPSS 5.1%CVE-2023-1020CRITICALSteveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLiEPSS 5.0%