Vulnerabilidades en Unknown

5533 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2026-16959MEDIUMMedia Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connectorEPSS 0.4%CVE-2024-6884MEDIUMGutenberg Blocks with AI by Kadence WP < 3.2.39 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-13314LOWCarousel, Slider, Gallery by WP Carousel < 2.7.4 - Admin+ Stored XSSEPSS 0.4%CVE-2026-14601MEDIUMLink Whisper < 0.9.7 - Editor+ SQL Injection via domain ParameterEPSS 0.4%CVE-2026-14872MEDIUMDatabase for Contact Form 7, WPforms, Elementor forms < 1.5.5 - Authenticated SQL Injection via id ParameterEPSS 0.4%CVE-2026-84937MEDIUMYT Player < 2.1.0 - Contributor+ SQLi via ytp_ajaxEPSS 0.4%CVE-2026-76556MEDIUMWP Import Export Lite < 3.9.33 - Authenticated SQLi via Export Filter RulesEPSS 0.4%CVE-2026-7842MEDIUMInfility Global < 2.15.20 - Editor+ SQL Injection via orderby ParameterEPSS 0.4%CVE-2026-15153MEDIUMWP Hotel Booking < 2.3.2 - Hotel Manager+ SQL Injection via Booking List SearchEPSS 0.4%CVE-2024-4627MEDIUMRank Math SEO < 1.0.219 - Authenticated Stored XSSEPSS 0.4%CVE-2023-6082MEDIUMChart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site ScriptingEPSS 0.4%CVE-2023-5458—CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVGEPSS 0.4%CVE-2024-2744MEDIUMNextgen Gallery < 3.59.1 - Admin+ Stored XSSEPSS 0.4%CVE-2023-6081MEDIUMChart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting in New ChartEPSS 0.4%CVE-2024-3580MEDIUMPopup4Phone <= 1.3.2 - Editor+ Stored XSSEPSS 0.4%CVE-2025-2162MEDIUMMapPress Maps for WordPress < 2.94.10 - Admin+ Stored XSSEPSS 0.4%CVE-2023-3179—POST SMTP Mailer < 2.5.7 - Account Takeover via CSRFEPSS 0.4%CVE-2024-9156MEDIUMTI WooCommerce Wishlist <= 2.8.2 - Unauthenticated SQL Injection via lang parametersEPSS 0.4%CVE-2026-11579MEDIUMKali Forms < 2.4.17 - Unauthenticated Media UploadEPSS 0.4%CVE-2023-2329—WooCommerce Google Sheet Connector < 1.3.6 - Access Code Update via CSRFEPSS 0.4%