Vulnerabilidades en Unknown
5533 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-87892MEDIUMRox Appointment Booking < 1.2.0 - Unauthenticated Price Manipulation and Payment Method Restriction BypassEPSS 0.3%CVE-2024-6493MEDIUMNinjaTeam Header Footer Custom Code < 1.2 - Admin+ Stored XSSEPSS 0.3%CVE-2024-6850MEDIUMCarousel Slider < 2.2.14 - Editor+ Stored XSSEPSS 0.3%CVE-2026-74926HIGHMultiVendorX 5.0.0 - 5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite via stores REST EndpointEPSS 0.3%CVE-2025-14975HIGHCustom Login Page Customizer < 2.5.4 - Unauthenticated Arbitrary Password ResetEPSS 0.3%CVE-2024-12736MEDIUMBU Section Editing <= 0.9.9 - Reflected XSSEPSS 0.3%CVE-2022-2275—WP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRFEPSS 0.3%CVE-2026-90978HIGHFilter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce CheckEPSS 0.3%CVE-2024-13626HIGHVR Frases <= 3.0.1 - Reflected XSSEPSS 0.3%CVE-2022-4024MEDIUMPie Register < 3.8.1.3 - Unauthenticated Arbitrary User DeletionEPSS 0.3%CVE-2024-10637MEDIUMKadence Blocks < 3.2.54 - Admin+ Stored XSSEPSS 0.3%CVE-2023-1086MEDIUMPreview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2026-18465MEDIUMWP Maps Pro < 6.1.3 - Unauthenticated Local File InclusionEPSS 0.3%CVE-2023-2179MEDIUMWooCommerce Order Status Change Notifier <= 1.1.0 - Subscriber+ Arbitrary Order Status UpdateEPSS 0.3%CVE-2024-4899MEDIUMSEOPress < 7.8 - Contributor+ Stored XSSEPSS 0.3%CVE-2023-6456MEDIUMWP Review Slider < 13.0 - Admin+ Stored XSSEPSS 0.3%CVE-2026-15045MEDIUMWallet System for WooCommerce < 2.7.10 - Customer+ Checkout Price Manipulation via Unvalidated Wallet AmountEPSS 0.3%CVE-2024-13493MEDIUMSensly Online Presence <= 0.6 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12109MEDIUMProduct Labels For Woocommerce < 1.5.9 - Admin+ SQLiEPSS 0.3%CVE-2024-10555MEDIUMMaxButtons < 9.8.1 - Admin+ Stored XSS via Button WidthEPSS 0.3%