Vulnerabilidades en Unknown
5533 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-87891MEDIUMRox Appointment Booking < 1.2.0 - Unauthenticated Holiday Schedule Modification via REST APIEPSS 0.3%CVE-2022-1591—WordPress Ping Optimizer < 2.35.1.3.0 - Arbitrary Settings Update via CSRFEPSS 0.3%CVE-2024-11107MEDIUMSystem Dashboard < 2.8.15 - Unauthenticated Stored XSSEPSS 0.3%CVE-2026-16955MEDIUMAI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio TranscriptionEPSS 0.3%CVE-2024-12768MEDIUMResponsive iframe <= 1.2.0 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-85574HIGHUnbounce Landing Pages 1.1.1 - 1.1.4 - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domainsEPSS 0.3%CVE-2024-2218MEDIUMLuckyWP Table of Contents <= 2.1.4 - Admin+ Stored XSSEPSS 0.3%CVE-2026-89080HIGHReally Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State DemotionEPSS 0.3%CVE-2022-2449MEDIUMreSmush.it Image Optimizer < 0.4.7 - Multiple CSRFEPSS 0.3%CVE-2024-4002LOWCarousel, Slider, Gallery by WP Carousel < 2.6.9 - Editor+ Stored XSSEPSS 0.3%CVE-2024-12770MEDIUMWP ULike < 4.7.6 - Admin+ Stored XSSEPSS 0.3%CVE-2024-8759MEDIUMNested Pages <= 3.2.8 - Editor+ Stored XSSEPSS 0.3%CVE-2024-8618MEDIUMPage Builder: Pagelayer < 1.9.0- Admin+ Stored XSSEPSS 0.3%CVE-2022-4016MEDIUMBooster for WooCommerce - Custom Role Creation/Deletion via CSRFEPSS 0.3%CVE-2024-6708MEDIUMProfile Builder <= 3.12.0 - Admin+ Stored Cross Site ScriptingEPSS 0.3%CVE-2024-10362MEDIUMSocial Media Share Buttons < 2.9.0 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13128MEDIUMLearnPress – WordPress LMS Plugin < 4.2.7.5.1 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12743MEDIUMMailPoet < 5.5.2 - Admin+ Stored XSSEPSS 0.3%CVE-2021-24912—Transposh WordPress Translation < 1.0.8 - CSRF to Stored XSSEPSS 0.3%CVE-2026-10522CRITICALSimple User Registration <= 6.9 - Unauthenticated Privilege Escalation to AdministratorEPSS 0.3%