Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2023-0548MEDIUMNamaste! LMS < 2.5.9.4 - Admin+ Stored XSSEPSS 0.5%CVE-2023-6485MEDIUMHtml5 Video Player < 2.5.19 - Subscriber+ Stored XSSEPSS 0.5%CVE-2022-2381—E Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRFEPSS 0.5%CVE-2023-3771MEDIUMT1 theme <= 19.0 - Open RedirectEPSS 0.5%CVE-2021-24978—OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post DeletionEPSS 0.5%CVE-2021-24595—WP Cookie Choice <= 1.1.0 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-0362MEDIUMThemify Portfolio Post < 1.2.2 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4307MEDIUMPardakht Delkhah < 2.9.3 - Unauthenticated Stored XSSEPSS 0.5%CVE-2023-0379MEDIUMSpotlight Social Feeds < 1.4.3 - Contributor+ Stored XSSEPSS 0.5%CVE-2026-12720HIGHKirki < 6.0.13 - Unauthenticated PHP Object InjectionEPSS 0.5%CVE-2023-3601MEDIUMSimple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOREPSS 0.5%CVE-2021-24950—Insight Core <= 1.0 - Subscriber+ PHP Object Injection & Stored XSSEPSS 0.5%CVE-2021-25042—WP Visitor Statistics (Real Time Traffic) < 5.5 - Arbitrary IP Address Exclusion to Stored XSSEPSS 0.5%CVE-2022-3839MEDIUMAnalytics for WP <= 1.5.1 - Admin+ Stored XSSEPSS 0.5%CVE-2021-25018—PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSSEPSS 0.5%CVE-2022-3829MEDIUMFont Awesome 4 Menus <= 4.7.0 - Admin+ Stored XSSEPSS 0.5%CVE-2022-1761—Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRFEPSS 0.5%CVE-2022-2091—Cache Images < 3.2.1 - Image Upload / Import via CSRFEPSS 0.5%CVE-2022-1843—MailPress <= 7.2.1 - Arbitrary Settings Update & Log Files Purge via CSRFEPSS 0.5%CVE-2024-1287MEDIUMPaid Memberships Pro - Member Directory Add On < 1.2.6 - Contributor+ Sensitive Information Disclosure via SQLiEPSS 0.5%