Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-1028—WordPress Security < 4.2.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-13222MEDIUMUser Messages <= 1.2.4 - Reflected XSSEPSS 0.6%CVE-2024-13327MEDIUMMusicbox <= 2.0.3 - Reflected XSSEPSS 0.6%CVE-2024-13326MEDIUMiBuildApp <= 0.2.0 - Reflected XSSEPSS 0.6%CVE-2024-13492MEDIUMGuten Free Options <= 0.9.5 - Reflected XSSEPSS 0.6%CVE-2024-13114MEDIUMWP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSSEPSS 0.6%CVE-2024-13331MEDIUMWP Dream Carousel <= 1.0.1b - Reflected XSSEPSS 0.6%CVE-2024-13328MEDIUMGiga Messenger Bots <= 2.3.1 - Reflected XSSEPSS 0.6%CVE-2024-13325MEDIUMGlossy <= 2.3.5 - Reflected XSSEPSS 0.6%CVE-2024-0904MEDIUMFancy Product Designer < 6.1.81 - Admin+ Cross Site ScriptingEPSS 0.6%CVE-2022-2167MEDIUMNewspaper < 12 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-3069MEDIUMWordlift < 3.37.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24890HIGHScripts Organizer < 3.0 - Unauthenticated Arbitrary File UploadEPSS 0.6%CVE-2024-12873MEDIUMCustom Field Manager <= 1.0 - Reflected XSS VulnerabilityEPSS 0.6%CVE-2022-2575—WBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSSEPSS 0.6%CVE-2022-2574MEDIUMMeks Easy Social Share < 1.2.8 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-4097MEDIUMAll In One WP Security & Firewall < 5.0.8 - IP SpoofingEPSS 0.6%CVE-2024-12749HIGHCompetition Form <= 2.0 - Reflected XSSEPSS 0.6%CVE-2022-0191—Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRFEPSS 0.6%CVE-2024-7766HIGHAdicon Server <= 1.2 - Admin+ SQL InjectionEPSS 0.6%