Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-18216MEDIUMBackup Migration < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-LoginEPSS 0.5%CVE-2023-1596MEDIUMtagDiv Composer < 4.0 - Reflected Cross-site ScriptingEPSS 0.5%CVE-2021-24584—Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot UpdateEPSS 0.5%CVE-2026-11855HIGHSimple Membership < 4.7.5 - Unauthenticated Stored XSS via Stripe Webhook API VersionEPSS 0.5%CVE-2026-85680HIGHUltimate Member < 2.13.1 - Unauthenticated Stored XSS via Profile Page TitleEPSS 0.5%CVE-2026-11767HIGHCRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact FormEPSS 0.5%CVE-2026-88793HIGHYouTube Embed 10.0 - 10.3 - Unauthenticated Stored XSS via youram_serverEPSS 0.5%CVE-2026-84829HIGHOptimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor ParameterEPSS 0.5%CVE-2026-5305HIGHEmail Address Encoder (Free < 1.0.25, Premium < 0.3.12) - Unauthenticated Stored XSSEPSS 0.5%CVE-2024-1204MEDIUMMeta Box < 5.9.4 - Contributor+ Arbitrary Posts' Custom Field DisclosureEPSS 0.5%CVE-2023-2718—Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.5%CVE-2026-78333HIGH12 Step Meeting List 3.17 - 3.19.16 - Unauthenticated Stored XSS via Geocode Event LogEPSS 0.5%CVE-2026-85122HIGHEasy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type ConfusionEPSS 0.5%CVE-2026-81660HIGHGroundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio FieldEPSS 0.5%CVE-2026-81807HIGHSimple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message LinkificationEPSS 0.5%CVE-2026-85677HIGHGutenverse News < 3.3.3 - Unauthenticated Stored XSS via Comment ContentEPSS 0.5%CVE-2026-12968HIGHProduct Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG UploadEPSS 0.5%CVE-2026-16617HIGHSimple File List <= 6.3.11 - Unauthenticated Stored XSS via File DescriptionEPSS 0.5%CVE-2026-76585HIGHCustomer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' ParameterEPSS 0.5%CVE-2026-88792HIGHDictionary <= 1.0 - Unauthenticated Stored XSS via Direct Dictionary UpdateEPSS 0.5%