Vulnerabilidades en Unknown
5518 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2023-6732MEDIUMUltimate Maps by Supsystic < 1.2.16 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3239MEDIUMPostX < 4.0.2 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-3986MEDIUMSportsPress < 2.7.22 - Admin+ Stored XSSEPSS 0.4%CVE-2026-12877CRITICALSoftware Issue Manager < 5.1.0 - Unauthenticated SQL Injection via Search ParameterEPSS 0.4%CVE-2023-6373HIGHArtPlacer Widget < 2.20.7 - Editor+ SQLiEPSS 0.4%CVE-2026-19116HIGHWP User Frontend < 4.3.11 - Subscriber+ PHP Object Injection via Frontend Post Edit FormEPSS 0.4%CVE-2023-5087MEDIUMPageLayer < 1.7.8 - Author+ Stored XSSEPSS 0.4%CVE-2022-2839—Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSSEPSS 0.4%CVE-2023-4642—kk Star Ratings < 5.4.6 - Rating Tampering via Race ConditionEPSS 0.4%CVE-2024-3112MEDIUMQuotes and Tips < 1.45 - Admin+ Arbitrary File UploadEPSS 0.4%CVE-2024-0711MEDIUMButtons Shortcode and Widget <= 1.16 - Stored XSS via shortcodeEPSS 0.4%CVE-2024-1076MEDIUMSSL Zen <= 4.5.3 - Unauthenticated Private Keys AccessEPSS 0.4%CVE-2025-1446MEDIUMPods < 3.2.8.2 - Admin+ SQL InjectionEPSS 0.4%CVE-2026-84934HIGHJCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task OverrideEPSS 0.4%CVE-2026-87888HIGHYayPricing < 3.5.7 - Subscriber+ Stored XSS via save_page_data REST RouteEPSS 0.4%CVE-2026-11766HIGHUltimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile FieldsEPSS 0.4%CVE-2026-84935HIGHHT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu SettingsEPSS 0.4%CVE-2021-24411—Social Tape <= 1.0 - CSRF to Stored XSSEPSS 0.4%CVE-2021-24683—Weather Effect < 1.3.4 - CSRF to Stored Cross-Site ScriptingEPSS 0.4%CVE-2021-24410—Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSSEPSS 0.4%