Vulnerabilidades en Unknown

5492 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-1541—Video Slider - Slider Carousel < 1.4.8 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1717—Custom Share Buttons with Floating Sidebar < 4.2 - Admin+ Stored XSSEPSS 0.6%CVE-2022-1326—Form - Contact Form <= 1.2.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1113—Flower Delivery by Florist One <= 3.7 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0376—User Meta < 2.4.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-4836MEDIUMBreadcrumb < 1.5.33 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-1294—IMDB info box <= 2.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1643—Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-0663—Print, PDF, Email by PrintFriendly < 5.2.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1266—Post Grid, Slider & Carousel Ultimate < 1.5.0 - Admin+ Stored XSSEPSS 0.6%CVE-2022-1301—WP Contact Slider < 2.4.7 - Editor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1601—User Access Manager < 2.2.18 - IP SpoofingEPSS 0.6%CVE-2023-6821MEDIUMError Log Viewer < 1.1.3 - Directory Listing to Sensitive Data ExposureEPSS 0.6%CVE-2024-13570MEDIUMStray Random Quotes <= 1.9.9 - Reflected XSSEPSS 0.6%CVE-2024-13543MEDIUMZarinpal Paid Downloads <= 2.3 - Reflected XSSEPSS 0.6%CVE-2018-3920HIGHAn exploitable code execution vulnerability exists in the firmware update functionality of the Yi Home Camera 27US 1.8.7.0D. A specially craEPSS 0.6%CVE-2022-3391MEDIUMRetain Live Chat <= 0.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2025-13307HIGHOcean Modal Window < 2.3.3 - Editor+ Remote Code Execution via Modal ConditionsEPSS 0.6%CVE-2022-1028—WordPress Security < 4.2.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-10146MEDIUMSimple File List < 6.1.13 - Reflected Cross-Site ScriptingEPSS 0.6%