Vulnerabilidades en Unknown

5533 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-6617MEDIUMNinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS StylesEPSS 0.4%CVE-2025-9697CRITICALAjax WooSearch <= 1.0.0 - Unauthenticated SQL InjectionEPSS 0.4%CVE-2024-0970MEDIUMUser Activity Tracking and Log < 4.1.4 - IP SpoofingEPSS 0.4%CVE-2026-16257HIGHArvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-JugglingEPSS 0.4%CVE-2022-3632MEDIUMOAuth Client by DigitialPixies <= 1.1.0 - CSRFEPSS 0.4%CVE-2022-3677MEDIUMAdvanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRFEPSS 0.4%CVE-2024-7761MEDIUMSimple Job Board < 2.12.2 - Admin+ Stored XSSEPSS 0.4%CVE-2026-19223HIGHSmush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on MultisiteEPSS 0.4%CVE-2024-10563MEDIUMWooCommerce Cart Count Shortcode < 1.1.0 - Contributor+ XSSEPSS 0.4%CVE-2023-2010—Forminator < 1.24.1 - Unauthenticated Race Condition on poll voteEPSS 0.4%CVE-2024-5809MEDIUMWP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-13608MEDIUMTrack Logins <= 1.0 - Admin+ SQL InjectionEPSS 0.4%CVE-2024-5034HIGHSULly < 4.3.1 - Plugin Reset via CSRFEPSS 0.4%CVE-2026-88843HIGHMasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories WidgetEPSS 0.4%CVE-2024-6226MEDIUMWpStickyBar <= 2.1.0 - Reflected XSSEPSS 0.4%CVE-2024-10980MEDIUMElement Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-10493MEDIUMElement Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSSEPSS 0.4%CVE-2024-3754MEDIUMAlemha Watermarker <= 1.3.1 - Author+ Stored XSSEPSS 0.4%CVE-2026-12500HIGHWP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option UpdateEPSS 0.4%CVE-2026-13178HIGHEventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status ManipulationEPSS 0.4%