Vulnerabilidades en Unknown

5492 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-4112MEDIUMQuizlord <= 2.0 - Admin+ Stored XSSEPSS 0.5%CVE-2022-3909MEDIUMAdd Comments <= 1.0.1 - Admin+ Stored XSSEPSS 0.5%CVE-2022-4010MEDIUMImage Hover Effects < 5.5 - Admin+ Stored XSSEPSS 0.5%CVE-2022-3831MEDIUMreCAPTCHA <= 1.6 - Admin+ Stored XSSEPSS 0.5%CVE-2022-3537HIGHRole Based Pricing for WooCommerce < 1.6.2 - Subscriber+ Arbitrary File UploadEPSS 0.5%CVE-2021-24989—Accept Donations with PayPal < 1.3.4 - Arbitrary Post Deletion via CSRFEPSS 0.5%CVE-2022-3822MEDIUMDonations via PayPal < 1.9.9 - Admin+ Stored XSSEPSS 0.5%CVE-2022-0446—Simple Banner < 2.12.0 - Admin+ Stored Cross Site ScriptingEPSS 0.5%CVE-2022-2245—Counter Box < 1.2.1 - Arbitrary Counter Activation/Deactivation via CSRFEPSS 0.5%CVE-2021-25095—IP2Location Country Blocker < 2.26.5 - Subscriber+ Arbitrary Country BanEPSS 0.5%CVE-2021-24641—Images to WebP < 1.9 - Multiple Cross Site Request Forgery (CSRF)EPSS 0.5%CVE-2024-13055HIGHDyn Business Panel <= 1.0.0 - Reflected XSSEPSS 0.5%CVE-2022-1572—HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File DeletionEPSS 0.5%CVE-2021-24636—Print My Blog < 3.4.2 - Plugin Deactivation via CSRFEPSS 0.5%CVE-2022-23179MEDIUMContact Form & Lead Form Elementor Builder < 1.7.0 - Multiple Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2026-14334HIGHBooking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File UploadEPSS 0.5%CVE-2026-16263HIGHWP Maps < 4.9.7 - Subscriber+ Local File InclusionEPSS 0.5%CVE-2023-1090MEDIUMWP SMTP Mailing Queue < 2.0.1 - Admin+ Stored XSSEPSS 0.5%CVE-2023-7239HIGHwp-dashboard-notes < 1.0.11 - Contributor+ Arbitrary Private Notes Update via IDOREPSS 0.5%CVE-2021-24922—Pixel Cat Lite < 2.6.2 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%