Vulnerabilidades en Unknown
5520 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-9529MEDIUMSecure Custom Fields < 6.3.6.3 - Admin+ Remote Code ExecutionEPSS 0.4%CVE-2024-5472HIGHWP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color fieldEPSS 0.4%CVE-2026-16548MEDIUMBit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response EndpointEPSS 0.4%CVE-2024-8983MEDIUMCustom Twitter Feeds < 2.2.3 - Admin+ Stored XSSEPSS 0.4%CVE-2026-83532MEDIUMCustom Menu Wizard <= 3.3.1 - Contributor+ Stored XSS via Shortcode AttributesEPSS 0.4%CVE-2026-77008MEDIUMHEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings UpdateEPSS 0.4%CVE-2026-83541MEDIUMSina Extension for Elementor 3.7.1 - 3.10.3 - Contributor+ Stored XSS via Table WidgetEPSS 0.4%CVE-2026-82846MEDIUMMasteriyo LMS 1.18.0 - 2.3.3 - Instructor+ Stored XSS via Course Custom FieldsEPSS 0.4%CVE-2026-76558MEDIUMWP Import Export Lite < 3.9.33 - Contributor+ Stored DOM XSS via Custom Field NamesEPSS 0.4%CVE-2026-84022MEDIUMBold Page Builder < 5.9.8 - Contributor+ Stored XSS via Multiple Shortcode Element AttributesEPSS 0.4%CVE-2026-10830HIGHAllCoach < 1.0.2 - Unauthenticated Account TakeoverEPSS 0.4%CVE-2026-86788MEDIUMHT Mega 3.2.0 - 3.2.5 - Contributor+ Stored XSS via Section Headline TagEPSS 0.4%CVE-2026-76546MEDIUMProfile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date ShortcodeEPSS 0.4%CVE-2026-14827MEDIUMCalendar < 1.3.18 - Contributor+ Stored XSS via event_link ParameterEPSS 0.4%CVE-2026-14318MEDIUMGiveWP < 4.16.3 - GiveWP Worker+ Stored XSS via Donation Form Template SettingsEPSS 0.4%CVE-2026-86790MEDIUMWP Highlight Box <= 1.0 - Contributor+ Stored XSS via highlight-box ShortcodeEPSS 0.4%CVE-2026-91011MEDIUMEWWW Image Optimizer < 8.7.7 - Author+ Stored XSS via Image Class Attribute Backreference ExpansionEPSS 0.4%CVE-2026-15047MEDIUMs2Member < 260805 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2026-84223MEDIUMKirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG UploadEPSS 0.4%CVE-2026-74992MEDIUMKirki < 6.2.3 - Editor+ Stored XSS via Font Zip UploadEPSS 0.4%