Vulnerabilidades en Unknown
5518 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2023-6046MEDIUMEventON < 2.2 - Admin+ Stored HTML InjectionEPSS 0.4%CVE-2023-2921HIGHShort URL <= 1.6.8 - Subscriber+ SQLiEPSS 0.4%CVE-2026-8163HIGHInfility Global < 2.15.19 - Subscriber+ SQL Injection via order ParameterEPSS 0.4%CVE-2025-15433MEDIUMShared Files < 1.7.58 - Contributor+ Arbitrary File DownloadEPSS 0.4%CVE-2024-4305MEDIUMPostX < 4.1.0 - Contributor+ Stored XSSEPSS 0.4%CVE-2026-13613HIGHKiviCare < 4.5.2 - Doctor/Receptionist+ SQL Injection via settings/listing REST EndpointEPSS 0.4%CVE-2026-77017HIGHWorkeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass AssignmentEPSS 0.4%CVE-2022-0875—miniOrange Google Authenticator < 1.0.5 - CSRF to Stored Cross-Site ScriptingEPSS 0.4%CVE-2022-1092—myCred < 2.4.4 - Subscriber+ Import/Export to Email Address DisclosureEPSS 0.4%CVE-2024-9768MEDIUMFormidable Forms < 6.14.1 - Admin+ Stored XSSEPSS 0.4%CVE-2022-1603—Mail Subscribe List < 2.1.4 - Arbitrary Subscribed User Deletion via CSRFEPSS 0.4%CVE-2022-1914—Clean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2022-1842—OpenBook Book Data <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2022-1885—Cimy Header Image Rotator <= 6.1.1 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2026-16954MEDIUMAI Engine < 3.6.4 - Editor+ Sensitive Information Disclosure of API Key and Bearer TokensEPSS 0.4%CVE-2022-1627—My Private Site < 3.0.8 - Arbitrary Settings Update via CSRFEPSS 0.4%CVE-2021-25013—Qubely < 1.7.8 - Subscriber+ Arbitrary Post DeletionEPSS 0.4%CVE-2022-1844—WP Sentry <= 1.0 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.4%CVE-2022-1709—Throws SPAM Away < 3.3.1 - Comment Deletion via CSRFEPSS 0.4%CVE-2022-1895—underConstruction < 1.20 - Construction Mode Deactivation via CSRFEPSS 0.4%