Vulnerabilidades en Unknown

5492 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-6228HIGHWANotifier < 2.6 - Subscriber+ LFIEPSS 0.5%CVE-2023-3372MEDIUMLana Shortcodes < 1.2.0 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4649MEDIUMWP Extended Search < 2.1.2 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2024-1712MEDIUMCarousel Slider < 2.2.7 - Editor+ Stored XSSEPSS 0.5%CVE-2022-4114MEDIUMSuperio - Job Board < 1.2.33 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-6824MEDIUMWP Customer Area < 8.2.1 - Subscriber+ Account Address LeakEPSS 0.5%CVE-2026-8935CRITICALAdvanced Google Maps < 6.1.1 - Unauthenticated Administrator Account CreationEPSS 0.5%CVE-2022-4329MEDIUMProduct list Widget for Woocommerce <= 1.0 - Reflected XSSEPSS 0.5%CVE-2022-3923MEDIUMActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log CleanupEPSS 0.5%CVE-2021-24586—Per Page Add to Head < 1.4.4 - CSRF to Stored XSSEPSS 0.5%CVE-2021-24431—Language Bar Flags <= 1.0.8 - CSRF to Stored XSSEPSS 0.5%CVE-2021-24806—wpDiscuz < 7.3.4 - Arbitrary Comment Addition/Edition/Deletion via CSRFEPSS 0.5%CVE-2026-14205CRITICALWP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' ParameterEPSS 0.5%CVE-2023-4023MEDIUMAll Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOREPSS 0.5%CVE-2024-0855MEDIUMSpiffy Calendar < 4.9.9 - Broken Access ControlEPSS 0.5%CVE-2024-0868MEDIUMcoreActivity < 2.1 - Unauthenticated IP SpoofingEPSS 0.5%CVE-2023-0076—Download Attachments < 1.3 - Contributor+ Stored XSSEPSS 0.5%CVE-2026-85129HIGHHoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings ImportEPSS 0.5%CVE-2023-0043MEDIUMCustom Add User <= 2.0.2 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2026-18464HIGHWP Maps Pro < 6.1.3 - Unauthenticated Denial of ServiceEPSS 0.5%