Vulnerabilidades en Unknown
5520 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2023-2995MEDIUMLeyka < 3.30.4 - Admin+ Stored XSSEPSS 0.4%CVE-2026-18653HIGHWP Directory Kit < 1.5.7 - Admin+ SQL Injection via section ParameterEPSS 0.4%CVE-2024-4655MEDIUMUltimate Blocks < 3.1.9 - Contributor+ Stored XSSEPSS 0.4%CVE-2021-24853—QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status UpdateEPSS 0.4%CVE-2025-13070MEDIUMCSV to SortTable <= 4.2 - Contributor+ LFIEPSS 0.4%CVE-2024-6021MEDIUMDonation Block for PayPal <= 2.1.0 - Unauthenticated Stored XSSEPSS 0.4%CVE-2026-9067CRITICALSchema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media UploadEPSS 0.4%CVE-2023-4821MEDIUMDrag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-2369MEDIUMPage Builder Gutenberg Blocks < 3.1.7 - Contributor+ Stored XSSEPSS 0.4%CVE-2022-2260—GiveWP < 2.21.3 - DoS via CSRFEPSS 0.4%CVE-2024-6487MEDIUMInline Related Posts < 3.8.0 - Admin+ Stored XSSEPSS 0.4%CVE-2026-87963HIGHYo 1.1 - 1.3.1 - Unauthenticated SQL Injection via username ParameterEPSS 0.4%CVE-2026-15205HIGHPaymob for WooCommerce < 4.1.9 - Unauthenticated SQL Injection via Paymob Callback Pixel LookupEPSS 0.4%CVE-2026-87767HIGHWP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via urlEPSS 0.4%CVE-2026-78472HIGHNi WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' ParameterEPSS 0.4%CVE-2026-84047HIGHAlbum Cover Finder <= 0.7.0 - Unauthenticated SQLi via and_actionEPSS 0.4%CVE-2026-17044HIGHWordPress File Upload < 5.1.8 - Unauthenticated SQL Injection via uniqueuploadidEPSS 0.4%CVE-2026-84068HIGHQuentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' ParameterEPSS 0.4%CVE-2026-12582HIGHLibrary Management System < 3.5.8 - Unauthenticated SQL Injection via book_idEPSS 0.4%CVE-2026-87775HIGHTz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cellEPSS 0.4%