Vulnerabilidades en Unknown
5533 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-8293HIGHReally Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP SkipEPSS 0.4%CVE-2023-3547HIGHAll in One B2B for WooCommerce <= 1.0.3 - Multiple CSRFEPSS 0.4%CVE-2026-78474MEDIUMNi WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' ParameterEPSS 0.4%CVE-2026-14235HIGHWordPress Download Manager < 3.3.62 - Unauthorized Protected File Download via Reusable Download KeyEPSS 0.4%CVE-2024-10710LOWYaDisk Files <= 1.2.5 - Admin+ Stored XSSEPSS 0.4%CVE-2026-15151HIGHFive Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notificationsEPSS 0.4%CVE-2023-4811MEDIUMWordPress File Upload < 4.23.3 - Author+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2022-4653MEDIUMGreenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2022-4669—Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via ShortcodeEPSS 0.4%CVE-2024-6334MEDIUM Easy Table of Contents < 2.0.67 - Editor+ Stored XSSEPSS 0.4%CVE-2022-3763HIGHBooster for WooCommerce - Checkout Files Deletion via CSRFEPSS 0.4%CVE-2022-1418—Social Stickers <= 2.2.9 - Stored Cross-Site Scripting via CSRFEPSS 0.4%CVE-2021-24837—Passster < 3.5.5.8 - Contributor+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-12277HIGHFrontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path TraversalEPSS 0.4%CVE-2024-10483HIGHSimplePress Forum < 6.10.11 - Reflected XSSEPSS 0.4%CVE-2026-96896HIGHMalcure Malware Shield < 19.9.7 - Multisite Subsite Admin+ Arbitrary File Write and Deletion via wpmr_ajax_requestEPSS 0.4%CVE-2024-6020MEDIUMSign-up Sheets < 2.2.13 - Reflected XSSEPSS 0.4%CVE-2026-76557MEDIUMWP Import Export Lite < 3.9.33 - Authenticated SQLi via Import OptionsEPSS 0.4%CVE-2024-2189MEDIUMSocial Icons Widget & Block < 4.2.18 - Admin+ Stored XSSEPSS 0.4%CVE-2024-6408MEDIUMSlider by 10Web < 1.2.57 - Editor+ Stored XSSEPSS 0.4%