Vulnerabilidades en Unknown

5492 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2023-3706MEDIUMActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title DisclosureEPSS 0.6%CVE-2023-3129—URL Shortify < 1.7.0 - Admin+ Cross Site ScriptingEPSS 0.6%CVE-2023-3225—Float menu < 5.0.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2023-6447MEDIUMEventPrime < 3.3.6 - Unauthenticated Event AccessEPSS 0.6%CVE-2022-3408MEDIUMWP Word Count <= 3.2.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-3462MEDIUMHighlight Focus <= 1.1 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-3469MEDIUMWP Attachments < 5.0.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2023-6042HIGHGetwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to AdminEPSS 0.6%CVE-2022-3237MEDIUMWP Contact Slider < 2.4.8 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-4670MEDIUMPDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2023-0373MEDIUMLightweight Accordion < 1.5.15 - Contributor+ Stored XSSEPSS 0.6%CVE-2024-12735HIGHAdvance Post Prefix <= 1.1.1 - Admin+ SQL InjectionEPSS 0.6%CVE-2024-11269HIGHAHAthat Plugin <= 1.6 - Admin+ SQL InjectionEPSS 0.6%CVE-2024-9831HIGHTaskbuilder < 3.0.9 - Admin+ SQL InjectionEPSS 0.6%CVE-2022-4362MEDIUMPopup Maker < 1.16.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2023-0143MEDIUMSend PDF for Contact Form 7 < 0.9.9.2 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2023-0171MEDIUMjQuery T(-) Countdown Widget < 2.3.24 - Contributor+ Stored XSSEPSS 0.6%CVE-2022-4677MEDIUMLeaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2023-5228MEDIUMUser Registration < 3.0.4.2 - Admin+ Stored XSSEPSS 0.6%CVE-2024-11267HIGHJSP Store Locator <= 1.0 - Contributor+ SQL InjectionEPSS 0.6%