Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2021-25072—NextScripts: Social Networks Auto-Poster < 4.3.25 - Arbitrary Post Deletion via CSRFEPSS 0.5%CVE-2023-5348—Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting UpdateEPSS 0.5%CVE-2022-0681—Simple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRFEPSS 0.5%CVE-2022-0445—WordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRFEPSS 0.5%CVE-2021-25098—Easy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRFEPSS 0.5%CVE-2026-14291HIGHSecurity Ninja (Premium) < 5.290 - Two-Factor Authentication Bypass via secnin_skip_2faEPSS 0.5%CVE-2021-24784—WP Admin Logo Changer <= 1.0 - Plugin's Settings Update via CSRFEPSS 0.5%CVE-2021-24795—Filter Portfolio Gallery <= 1.5 - Arbitrary Gallery Deletion via CSRFEPSS 0.5%CVE-2021-24843—SupportCandy < 2.2.7 - Arbitrary Ticket Deletion via CSRFEPSS 0.5%CVE-2022-3631MEDIUMOAuth Client by DigitialPixies <= 1.1.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-2413MEDIUMSlide Anything < 2.3.47 - Author+ Cross Site Scripting in slide titleEPSS 0.5%CVE-2022-3753MEDIUMEvaluate <= 1.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-23180MEDIUMContact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings UpdateEPSS 0.5%CVE-2022-3539MEDIUMTestimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-0094MEDIUMUpQode Google Maps <= 1.0.5 - Contributor+ Stored XSSEPSS 0.5%CVE-2021-25044—Cryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2022-3209—Soledad < 8.2.5 - Reflected Cross-site ScriptingEPSS 0.5%CVE-2023-1325MEDIUMEasy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4679MEDIUMWufoo Shortcode < 1.52 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2023-0539—GS Insever Portfolio < 1.4.5 - Contributor+ Stored XSSEPSS 0.5%