Vulnerabilidades en Unknown
5518 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-2509MEDIUMGutenberg Blocks by Kadence Blocks < 3.2.26 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-7200MEDIUMEventON < 4.4.1 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-4149MEDIUMFloating Chat Widget < 3.2.3 - Admin+ Stored XSSEPSS 0.4%CVE-2023-5738—WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSSEPSS 0.4%CVE-2021-24968—Ultimate FAQ < 2.1.2 - Subscriber+ Arbitrary FAQ CreationEPSS 0.4%CVE-2026-12684MEDIUMCustomer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_mediaEPSS 0.4%CVE-2023-4799—Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcodeEPSS 0.4%CVE-2023-5620—Webpushr < 4.35.0 - Unauthenticated Stored XSSEPSS 0.4%CVE-2026-16036HIGHminiOrange 2FA < 6.2.7 - 2FA Bypass via Password-Only Second-Factor RebindingEPSS 0.4%CVE-2021-25011—WP Google Map < 1.8.1 - Subscriber+ Arbitrary Post Deletion and Plugin's Settings UpdateEPSS 0.4%CVE-2026-84898MEDIUMEventin < 4.1.21 - Contributor+ LFI via Event Layout MetaEPSS 0.4%CVE-2026-9830HIGHBookingPress Pro < 5.7.3 - Unauthenticated Customer PII Disclosure and Booking Tampering via Permission Callback BugEPSS 0.4%CVE-2024-3755MEDIUMMF Gig Calendar <= 1.2.1 - Editor+ Stored XSSEPSS 0.4%CVE-2023-4970—PubyDoc <= 2.0.6 - Admin+ Stored XSSEPSS 0.4%CVE-2021-25116—Enqueue Anything <= 1.0.1 - Subscriber+ Arbitrary Asset/Post DeletionEPSS 0.4%CVE-2024-1274MEDIUMMy Calendar < 3.4.24 - Authenticated Stored XSSEPSS 0.4%CVE-2024-3752MEDIUMCrelly Slider <= 1.4.5 - Admin+ Stored XSSEPSS 0.4%CVE-2023-4808—WP Post Popup <= 3.7.3 - Admin+ Stored XSSEPSS 0.4%CVE-2024-4602MEDIUMEmbed Peertube Playlist < 1.10 - Editor+ Stored XSSEPSS 0.4%CVE-2023-5940—WP Not Login Hide <= 1.0 - Admin+ Stored XSSEPSS 0.4%