Vulnerabilidades en Unknown
5533 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-13402MEDIUMRoyal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template DisclosureEPSS 0.3%CVE-2026-16575MEDIUMDokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST EndpointEPSS 0.3%CVE-2026-78125MEDIUMLearnPress – Sepay Payment < 4.0.3 - Unauthenticated Order Status DisclosureEPSS 0.3%CVE-2026-16612MEDIUMFiboSearch < 1.34.1 - Unauthenticated Password-Protected Product Information DisclosureEPSS 0.3%CVE-2026-86445MEDIUMLearnPress < 4.4.7 - Unauthenticated Question Bank Disclosure via load_content_via_ajaxEPSS 0.3%CVE-2026-80340MEDIUMPayment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-payEPSS 0.3%CVE-2026-79631MEDIUMWPFunnels < 3.13.0 - Unauthenticated Order and Opt-In PII Disclosure via Web-Accessible Log FilesEPSS 0.3%CVE-2026-84222MEDIUMKirki 6.2.1 - 6.2.5 - Unauthenticated Non-Public Post Content Disclosure via 'kirki_data' ParameterEPSS 0.3%CVE-2024-5282MEDIUMWP Affiliate Platform < 6.5.1 - Reflected XSS via Registration FormEPSS 0.3%CVE-2026-2696MEDIUMExport All URLs < 5.1 - Unauthenticated Sensitive Data ExposureEPSS 0.3%CVE-2024-6272MEDIUMSpiderContacts <= 1.1.7 - Reflected XSSEPSS 0.3%CVE-2026-78149MEDIUMPost Carousel 4.0.0 - 4.0.7 - Unauthenticated Password-Protected Post Content and post_password Disclosure via sp_handle_post_idEPSS 0.3%CVE-2026-87854MEDIUMSubscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key BypassEPSS 0.3%CVE-2026-87907MEDIUMRox Appointment Booking < 1.2.8 - Unauthenticated Internal Notes Disclosure via Service and Category REST RoutesEPSS 0.3%CVE-2026-87896MEDIUMRox Appointment Booking < 1.2.8 - Unauthenticated Staff PII Disclosure via Agent REST RouteEPSS 0.3%CVE-2026-81197MEDIUMMasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST RouteEPSS 0.3%CVE-2026-18231MEDIUMWP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_userEPSS 0.3%CVE-2025-14973MEDIUMRecipe Card Blocks < 3.4.13 - Contributor+ SQLiEPSS 0.3%CVE-2026-78151MEDIUMFormLayer < 1.0.9 - Unauthenticated Form Configuration Disclosure via Form Submission ResponseEPSS 0.3%CVE-2026-81195MEDIUMMasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST RouteEPSS 0.3%