Vulnerabilidades en Unknown
5533 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-7891MEDIUMFloating Contact Button < 2.8 - Admin+ Stored XSSEPSS 0.3%CVE-2024-8670MEDIUMPhoto Gallery by 10Web < 1.8.29 - Admin+ Stored XSSEPSS 0.3%CVE-2024-8492MEDIUMHustle < 7.8.5 - Admin+ Stored XSSEPSS 0.3%CVE-2024-11645MEDIUMFloat Block <= 1.7 - Admin+ Stored XSS via WidgetEPSS 0.3%CVE-2024-9428MEDIUMPopup Builder < 4.3.5 - Admin+ Stored XSSEPSS 0.3%CVE-2024-6715MEDIUMDitty 3.1.39-3.1.45 - Author+ Stored XSSEPSS 0.3%CVE-2024-8493MEDIUMThe Events Calendar < 6.6.4 - Admin+ Stored XSSEPSS 0.3%CVE-2025-14072MEDIUMNinja Forms < 3.13.3 - Unauthenticated Token Generation and Submission DisclosureEPSS 0.3%CVE-2024-8542MEDIUMEverest Forms < 3.0.3.1 - Admin+ Stored XSSEPSS 0.3%CVE-2024-6335MEDIUMTracking Code Manager < 2.3.0- Admin+ Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-8284MEDIUMDownload Manager <= 3.2.98 - Admin+ Stored XSSEPSS 0.3%CVE-2026-92438HIGHNinja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions AdminEPSS 0.3%CVE-2024-7692MEDIUMFlaming Forms <= 1.0.1 - Reflected XSSEPSS 0.3%CVE-2024-3917MEDIUMPet Manager <= 1.4 - Reflected XSSEPSS 0.3%CVE-2022-0634—ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRFEPSS 0.3%CVE-2024-3643HIGHNewsletter Popup <= 1.2 - List Deletion via CSRFEPSS 0.3%CVE-2021-25025—Event Calendar < 1.1.51 - Subscriber+ Event CreationEPSS 0.3%CVE-2026-13342MEDIUMSecurity Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_passwordEPSS 0.3%CVE-2021-24836—Temporary Login Without Password < 1.7.1 - Subscriber+ Plugin's Settings UpdateEPSS 0.3%CVE-2024-3406HIGHWP Prayer <= 2.0.9 - Email Settings Update via CSRFEPSS 0.3%