Vulnerabilidades en Unknown
5518 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-19615MEDIUMAdmin and Site Enhancements < 9.0.1 - Author+ Stored XSS via SVG Upload over XML-RPCEPSS 0.4%CVE-2026-84021MEDIUMBold Page Builder < 5.9.8 - Contributor+ Stored XSS via bt_bb_button/bt_bb_headline/bt_bb_icon URLEPSS 0.4%CVE-2026-86788MEDIUMHT Mega 3.2.0 - 3.2.5 - Contributor+ Stored XSS via Section Headline TagEPSS 0.4%CVE-2026-10077MEDIUMYOOtheme Pro < 5.0.35 - Author+ Stored XSS via UIkit Data AttributesEPSS 0.4%CVE-2026-83547MEDIUMXpro Elementor Addons 1.6.0 - 1.7.3 - Contributor+ Stored XSS via Multiple WidgetsEPSS 0.4%CVE-2026-16559MEDIUMYMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon UploadEPSS 0.4%CVE-2026-14833MEDIUMLightbox with PhotoSwipe < 5.9.0 - Author+ Stored XSS via data-lbwps-caption AttributeEPSS 0.4%CVE-2026-84088MEDIUMXpro Elementor Addons < 1.7.9 - Contributor+ Stored XSS via Interactive Circle WidgetEPSS 0.4%CVE-2026-14827MEDIUMCalendar < 1.3.18 - Contributor+ Stored XSS via event_link ParameterEPSS 0.4%CVE-2026-18202MEDIUMJetEngine < 3.8.14 - Author+ Stored XSS via SVG UploadEPSS 0.4%CVE-2026-5336MEDIUMDataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information DisclosureEPSS 0.4%CVE-2021-24433MEDIUMSimple Sort&Search <= 0.0.3 - Ccontributor+ Stored XSSEPSS 0.4%CVE-2026-82884MEDIUMAll in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant BlockEPSS 0.4%CVE-2022-2123—WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2026-19697MEDIUMGutenKit < 2.5.0 - Author+ Stored XSS via SVG UploadEPSS 0.4%CVE-2026-10750HIGHRoyal MCP < 1.4.26 - Subscriber+ Insufficient Authorization in MCP ToolsEPSS 0.4%CVE-2024-5744MEDIUMWP eMember < 10.6.7 - Reflected XSSEPSS 0.4%CVE-2024-4750MEDIUMBuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like CommentEPSS 0.4%CVE-2023-6005MEDIUMEventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2024-4096MEDIUMResponsive Tabs <= 4.0.8 - Contributor+ Stored XSSEPSS 0.4%