Vulnerabilidades en Unknown
5576 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2025-1363LOWeasy-broken-link-checker <= 9.0.2 - Admin+ Stored XSSEPSS 0.3%CVE-2024-11190MEDIUMjwp-a11y <= 4.1.7 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13121LOWPaid Membership Plugin < 4.15.20 - Admin+ Stored XSSEPSS 0.3%CVE-2024-13864HIGHCountdown Timer <= 1.0 - Reflected XSSEPSS 0.3%CVE-2022-2405MEDIUMWP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup DeletionEPSS 0.3%CVE-2022-2657—Multivendor Marketplace Solution for WooCommerce < 3.8.12 - Unauthorised AJAX CallsEPSS 0.3%CVE-2023-0824HIGHUserPlus <= 2.0 - Stored XSS via CSRFEPSS 0.3%CVE-2024-1756MEDIUMWooCommerce Customers Manager < 29.8 - Subscriber+ Email DisclosureEPSS 0.3%CVE-2024-12595MEDIUMAHAthat Plugin <= 1.6 - Reflected XSS via REQUEST_URIEPSS 0.3%CVE-2021-24611—Keywords & Meta <= 3.0 - CSRF to Stored Cross-Site Scripting (XSS)EPSS 0.3%CVE-2024-5447MEDIUMPayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSSEPSS 0.3%CVE-2024-9770MEDIUMWP-Recall < 16.26.12 - Admin+ SQL InjectionEPSS 0.3%CVE-2024-6362MEDIUMUltimate Blocks < 3.2.0 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-81340LOWMasterStudy LMS < 3.7.50 - Instructor+ Order Status Manipulation via IDOREPSS 0.3%CVE-2024-10554LOWWP-Advanced-Search < 3.3.9.3 - Admin+ Stored XSSEPSS 0.3%CVE-2026-81198LOWMasterStudy LMS < 3.7.46 - Instructor+ Cross-Course Curriculum Deletion and Tampering via IDOREPSS 0.3%CVE-2026-92420LOWHydra Booking < 1.2.2 - Hydra Host+ Cross-Host Booking Deletion and Modification via IDOREPSS 0.3%CVE-2024-10560LOWForm Maker by 10Web < 1.15.30 - Admin+ Stored XSSEPSS 0.3%CVE-2026-14222LOWEasy Appointments < 3.12.28 - Contributor+ Connection Deletion via Missing AuthorizationEPSS 0.3%CVE-2025-5998MEDIUMPPWP < 1.9.11 - Subscriber+ Access Bypass via REST APIEPSS 0.3%