Vulnerabilidades en Unknown
5533 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-81090HIGHGpx2Graphics <= 0.3 - Arbitrary File Upload via CSRFEPSS 0.4%CVE-2023-5932MEDIUMTravelpayouts < 1.1.14 - Reflected XSSEPSS 0.4%CVE-2024-2696MEDIUMSwift Framework < 2024.04.30 - Admin+ Stored XSS via SettingsEPSS 0.4%CVE-2023-5529MEDIUMAdvanced Page Visit Counter <= 8.0.6 - Admin+ Stored XSSEPSS 0.4%CVE-2026-77792HIGHRegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating FieldEPSS 0.4%CVE-2024-5079MEDIUMWP eMember < 10.6.7 - Unauthenticated Stored XSS via Member RegistrationEPSS 0.4%CVE-2024-4664MEDIUMWP Chat App < 3.6.5 - Admin+ Stored XSSEPSS 0.4%CVE-2026-18052HIGHManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login ParametersEPSS 0.4%CVE-2024-6927MEDIUMViral Signup <= 2.1 - Admin+ Stored XSSEPSS 0.4%CVE-2026-82842HIGHSAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account MatchingEPSS 0.4%CVE-2024-3644MEDIUMNewsletter Popup <= 1.2 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3920LOWFlattr <= 1.2.2 - Admin+ Stored XSSEPSS 0.4%CVE-2024-3921MEDIUMGianism <= 5.1.0 - Admin+ Stored XSSEPSS 0.4%CVE-2024-5286MEDIUMWP Affiliate Platform < 6.5.1 - Reflected XSS via Banner EditingEPSS 0.4%CVE-2026-14931MEDIUMJS Help Desk < 3.1.4 - Contributor+ User Email DisclosureEPSS 0.4%CVE-2026-16968MEDIUMGeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_search_usersEPSS 0.4%CVE-2026-18943MEDIUMWPC Admin Columns < 2.3.4 - Subscriber+ Arbitrary User/Post/Term Meta DisclosureEPSS 0.4%CVE-2026-16541MEDIUMSimply Schedule Appointments < 1.6.12.17 - Team Member+ User Email Disclosure via Users and Customers REST EndpointsEPSS 0.4%CVE-2026-9710HIGHThemeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash DisclosureEPSS 0.4%CVE-2026-14928MEDIUMJS Help Desk < 3.1.4 - Subscriber+ Sensitive Information Disclosure via checkAIReplyTicketsBySubjectEPSS 0.4%