Vulnerabilidades en Unknown

5518 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-17540HIGHBit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source MismatchEPSS 0.4%CVE-2024-10568MEDIUMAjax Search Lite < 4.12.4 - Admin+ Stored XSSEPSS 0.4%CVE-2024-2444MEDIUMInline Related Posts < 3.5.0 - Admin+ Stored XSSEPSS 0.4%CVE-2024-0248MEDIUMEazyDocs < 2.4.0 - Subscriber+ Arbitrary Posts Deletion and Document ManagementEPSS 0.4%CVE-2023-5137MEDIUMSimply Excerpts <= 1.4 - Admin+ Stored XSSEPSS 0.4%CVE-2024-1330MEDIUMKadence Blocks Pro < 2.3.8 - Contributor+ Arbitrary Option AccessEPSS 0.4%CVE-2024-2309MEDIUMWP Staging < 3.4.0, 5.4.0 (Pro Version) - Admin+ Stored XSSEPSS 0.4%CVE-2024-5002MEDIUMUser Submitted Posts < 20240516 - Admin+ Stored XSSEPSS 0.4%CVE-2022-3605HIGHWP CSV Exporter < 1.3.7 - CSV InjectionEPSS 0.4%CVE-2024-4061MEDIUMSurvey Maker < 4.2.9 - Admin+ Stored XSS via Plugin SettingsEPSS 0.4%CVE-2024-3265MEDIUMWP Advanced Search <= 1.1.6 - Admin+ SQL InjectionEPSS 0.4%CVE-2022-1570—Files Download Delay < 1.0.7 - Subscriber+ Settings ResetEPSS 0.4%CVE-2022-2388—WP Coder < 2.5.3 - Code Deletion via CSRFEPSS 0.4%CVE-2022-2144—Jquery Validation For Contact Form 7 < 5.3 - Arbitrary Options Update via CSRFEPSS 0.4%CVE-2026-4375CRITICALDoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCEEPSS 0.4%CVE-2023-4819MEDIUMShared Files < 1.7.6 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.4%CVE-2023-6161MEDIUMWP Crowdfunding < 2.1.9 - Reflected XSSEPSS 0.4%CVE-2024-2870MEDIUMSwift Framework < 2024.04.30 - Reflected XSSEPSS 0.4%CVE-2023-6067MEDIUMWP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSSEPSS 0.4%CVE-2023-6268—JSON Content Importer < 1.5.4 - Reflected XSSEPSS 0.4%