Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-81810HIGHAll-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key DisclosureEPSS 0.5%CVE-2026-81431HIGHRegistration Form for WooCommerce 1.1.0 - 1.1.2 - Contributor+ Privilege Escalation via Unvalidated tgwcfb_idEPSS 0.5%CVE-2026-14237HIGHVitepos < 3.6.0 - Outlet Manager+ Privilege EscalationEPSS 0.5%CVE-2023-0395MEDIUMmenu shortcode <= 1.0 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2026-13174HIGHEventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOREPSS 0.5%CVE-2026-16605HIGHMultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion via Missing AuthorizationEPSS 0.5%CVE-2026-80071HIGHUser Registration & Membership < 5.2.8 - Author+ Privilege Escalation to AdministratorEPSS 0.5%CVE-2023-0233MEDIUMActiveCampaign < 8.1.12 - Contributor+ Stored XSSEPSS 0.5%CVE-2024-13896MEDIUMWP-GeSHi-Highlight <= 1.4.3 - Author+ ReDoSEPSS 0.5%CVE-2023-4757MEDIUMStaff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entriesEPSS 0.5%CVE-2026-11568HIGHProduct Configurator for WooCommerce < 1.7.3 - Unauthenticated Private/Draft Product Data Disclosure via pc_get_dataEPSS 0.5%CVE-2024-4217MEDIUMShortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSSEPSS 0.5%CVE-2023-1839MEDIUMProduct Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-7151MEDIUMProduct Enquiry for WooCommerce < 3.2 - Reflected XSSEPSS 0.5%CVE-2025-6174MEDIUMWordPress Qwizcards <= 3.9.4 - Reflected XSSEPSS 0.5%CVE-2023-4798—User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSSEPSS 0.5%CVE-2026-19093MEDIUMTutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Video PathEPSS 0.5%CVE-2023-2324—Elementor Forms Google Sheet Connector < 1.0.7 - Reflected XSSEPSS 0.5%CVE-2023-1465MEDIUMWP EasyPay < 4.1 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2021-24166—Ninja Forms < 3.4.34 - CSRF to OAuth Service DisconnectionEPSS 0.5%