Vulnerabilidades en Unknown

5492 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2023-0733MEDIUMNewsletter Popup <= 1.2 - Unauthenticated Stored XSSEPSS 0.5%CVE-2024-1754MEDIUMNPS computy <= 2.7.5 - Admin+ Stored XSSEPSS 0.5%CVE-2023-5560—WP-UserOnline < 2.88.3 - Unauthenticated Stored XSSEPSS 0.5%CVE-2023-2751MEDIUMUpload Resume <= 1.2.0 - Captcha BypassEPSS 0.5%CVE-2022-2311MEDIUMFind and Replace All < 1.3 - Reflected Cross Site ScriptingEPSS 0.5%CVE-2023-6786MEDIUMPayment Gateway for Telcell <= 2.0.1 - Unauthenticated Open RedirectEPSS 0.5%CVE-2024-8031MEDIUMSecure Downloads < 1.2.3 - Admin+ Arbitrary File DownloadEPSS 0.5%CVE-2022-3937MEDIUMEasy Video Player < 1.2.2.3 - Contributor+ Stored XSSEPSS 0.5%CVE-2025-2048MEDIUMLana Downloads Manager < 1.10.0 - Admin+ Arbitrary File Download via Path TraversalEPSS 0.5%CVE-2022-4477MEDIUMSmash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-0219—FluentSMTP < 2.2.3 - Stored XSS via Email LogsEPSS 0.5%CVE-2022-4470MEDIUMWidgets for Google Reviews < 9.8 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-2271—WP Database Backup < 5.9 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2015-10001—WP-Stats < 2.5.2 - CSRF to Stored Cross-Site Scripting (XSS)EPSS 0.5%CVE-2025-15030CRITICALUser Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password ResetEPSS 0.5%CVE-2021-24685—Flat Preloader < 1.5.4 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%CVE-2020-36656MEDIUMSpectra < 1.15.0 - Contributor+ Stored Cross-Side ScriptingEPSS 0.5%CVE-2022-4667MEDIUMRSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSSEPSS 0.5%CVE-2026-18216MEDIUMBackup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-LoginEPSS 0.5%CVE-2022-3922MEDIUMBroken Link Checker < 1.11.20 - Admin+ Cross-Site ScriptingEPSS 0.5%