Vulnerabilidades en Unknown
5533 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-2643MEDIUMMy Sticky Bar < 2.6.8 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13822MEDIUMTotal Contest Lite <= 2.8.1 - Reflected XSSEPSS 0.3%CVE-2026-19726MEDIUMVisualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration DisclosureEPSS 0.3%CVE-2026-19417MEDIUMKiviCare < 4.5.4 - Patient+ Arbitrary Media Attachment Read via IDOREPSS 0.3%CVE-2026-16563MEDIUMAcademy LMS < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST EndpointEPSS 0.3%CVE-2026-14923MEDIUMSync Post With Other Site < 1.9.3 - Contributor+ Arbitrary Page Creation/ModificationEPSS 0.3%CVE-2026-16039MEDIUMMStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOREPSS 0.3%CVE-2026-5337MEDIUMFrontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOREPSS 0.3%CVE-2024-12173LOWMaster Slider < 3.10.5 - Editor+ Stored XSSEPSS 0.3%CVE-2024-11644MEDIUMWP-SVG <= 0.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.3%CVE-2026-15209MEDIUMJS Help Desk – AI-Powered Support & Ticketing System < 3.1.5 - Subscriber+ Cross-User Support Ticket Disclosure via IDOREPSS 0.3%CVE-2026-15254MEDIUMSimply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin ShortcodeEPSS 0.3%CVE-2025-0368MEDIUMBanner Garden Plugin for WordPress <= 0.1.3 - Reflected XSSEPSS 0.3%CVE-2024-13125LOWEverest Forms < 3.0.8.1 - Admin+ Stored XSSEPSS 0.3%CVE-2026-9822MEDIUMWP Hotel Booking < 2.3.1 - Subscriber+ Missing Authorization in Multiple AJAX HandlersEPSS 0.3%CVE-2022-4017HIGHBooster for WooCommerce - Multiple CSRFEPSS 0.3%CVE-2026-15250MEDIUMLatePoint < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking FunnelEPSS 0.3%CVE-2026-12723MEDIUMKirki < 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component LibraryEPSS 0.3%CVE-2025-10916CRITICALFormGent < 1.0.4 - Unauthenticated Arbitrary File DeletionEPSS 0.3%CVE-2022-3879MEDIUMCar Dealer < 3.05 - Subscriber+ Arbitrary Plugin InstallationEPSS 0.3%