Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-8071HIGHSpam protection, Honeypot, Anti-Spam by CleanTalk < 6.79 - Unauthenticated Stored XSS via Comment Shortcode BypassEPSS 0.5%CVE-2026-76789HIGHSlider Hero < 9.1.3 - Unauthenticated Stored XSS via Slider Type Change and Add-Slider HandlersEPSS 0.5%CVE-2026-11589HIGHWP Support Plus Responsive Ticket System <= 9.1.2 - Unauthenticated Stored XSS via File UploadEPSS 0.5%CVE-2026-81742HIGHBE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget ManipulationEPSS 0.5%CVE-2026-85122HIGHEasy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type ConfusionEPSS 0.5%CVE-2026-10081HIGHUnlimited Elements for Elementor < 2.0.11 - Unauthenticated Stored XSS via Google Reviews WidgetEPSS 0.5%CVE-2026-88825HIGHiGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget SettingsEPSS 0.5%CVE-2026-11767HIGHCRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact FormEPSS 0.5%CVE-2026-12968HIGHProduct Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrary SVG UploadEPSS 0.5%CVE-2026-87786HIGHDewa Kirim <= 1.0.0 - Unauthenticated Stored XSS via Checkout CoordinatesEPSS 0.5%CVE-2024-9828MEDIUMTaskbuilder < 3.0.5 - Admin+ SQL InjectionEPSS 0.5%CVE-2021-24570—Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-0274—URL Params < 2.5 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-0272MEDIUMNEX-Forms < 8.3.3 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-2028—Call Now Accessibility Button < 1.1 - Admin+ Stored Cross Site ScriptingEPSS 0.5%CVE-2022-4431MEDIUMWOOCS < 1.3.9.4 - Contributor+ Stored XSSEPSS 0.5%CVE-2024-13925HIGHKlarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive LoggingEPSS 0.5%CVE-2023-0604MEDIUMWP Food Manager < 1.0.4 - Admin+ Stored XSSEPSS 0.5%CVE-2023-0537MEDIUMProduct Slider For WooCommerce Lite <= 1.1.7 - Contributor+ Stored XSSEPSS 0.5%CVE-2024-11223MEDIUMWPForms < 1.9.2.3 - Admin+ Stored XSSEPSS 0.5%