Vulnerabilidades en Unknown
5520 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-3548MEDIUMShortcodes Ultimate < 7.1.2 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-0424MEDIUMMS-Reviews <= 1.5 - Subscriber+ Stored XSSEPSS 0.4%CVE-2024-1660MEDIUMTop Bar < 3.0.5 - Admin+ Stored XSSEPSS 0.4%CVE-2024-6158MEDIUMCategory Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSSEPSS 0.4%CVE-2024-4749HIGHWP eMember < 10.3.9 - Reflected XSSEPSS 0.4%CVE-2023-3170MEDIUMtagDiv Composer < 4.2 - Admin+ Stored XSSEPSS 0.4%CVE-2023-7154MEDIUMHubbub Lite < 1.32.0 - Admin+ Stored XSSEPSS 0.4%CVE-2026-14924HIGHTablesome < 1.1.31 - Unauthenticated Post Creation and ModificationEPSS 0.4%CVE-2023-2527MEDIUMIntegration for Contact Form 7 and Zoho CRM, Bigin < 1.2.4 - Admin+ SQLiEPSS 0.4%CVE-2026-14861HIGHUser Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOREPSS 0.4%CVE-2026-4338HIGHActivityPub Routing < 8.0.2 - Unauthenticated Drafts/Scheduled/Pending Posts DisclosureEPSS 0.4%CVE-2022-4792MEDIUMNews & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2023-7231HIGHilli Link Party! <= 1.0 - Unauthenticated Arbitrary Link DeletionEPSS 0.4%CVE-2024-7133MEDIUMMy Sticky Bar < 2.7.3 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3188MEDIUMShortcodes Ultimate < 7.1.0 - Contributor+ Stored XSSEPSS 0.4%CVE-2026-77770CRITICALminiOrange 2FA (Free & Pro) - Unauthenticated Arbitrary Option Deletion via Out-of-Band Email Link ValidatorEPSS 0.4%CVE-2025-3649MEDIUMLightPress Lightbox < 2.3.4 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-4810MEDIUMResponsive Pricing Table < 5.1.8 - Admin+ Stored Cross-Site ScripingEPSS 0.4%CVE-2022-3096MEDIUMWP Total Hacks <= 4.7.2 - Subscriber+ Arbitrary Options Update to Stored XSSEPSS 0.4%CVE-2024-6879MEDIUMQuiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSSEPSS 0.4%