Vulnerabilidades en Unknown

5576 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-0249HIGHAdvanced Schedule Posts <= 2.1.8 - Reflected XSSEPSS 0.3%CVE-2026-80488MEDIUMWP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import FieldsEPSS 0.3%CVE-2026-82182MEDIUMWPvivid Backup & Migration < 0.9.133 - Admin+ SQLi via Upload Cleaner IsolationEPSS 0.3%CVE-2024-10551MEDIUMSticky Social Icons <= 1.2.1 - Admin+ Stored XSSEPSS 0.3%CVE-2024-7879MEDIUMWP ULike < 4.7.5 - Admin+ Stored XSS via WidgetsEPSS 0.3%CVE-2024-6722MEDIUMChatbot Support AI <= 1.0.2 - Admin+ Stored XSSEPSS 0.3%CVE-2026-86448LOWLearnPress < 4.4.7 - Unauthenticated Order Data Disclosure via lp_download_orderEPSS 0.3%CVE-2024-5417MEDIUMGutentor < 3.3.6 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-82186MEDIUMWPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' ParameterEPSS 0.3%CVE-2023-7228MEDIUMilli Link Party! <= 1.0 - Unauthenticated Stored XSSEPSS 0.3%CVE-2024-6718MEDIUMPVN Auth Popup <= 1.0.0 - Contributor+ XSS via ShortcodeEPSS 0.3%CVE-2022-2171—Progressive License <= 1.1.0 - CSRF to Stored XSSEPSS 0.3%CVE-2024-11502MEDIUMPlanning Center Online Giving <= 1.0.0 - Contributor+ XSS via ShortcodeEPSS 0.3%CVE-2024-12722MEDIUMTwitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via ShortcodeEPSS 0.3%CVE-2026-86475MEDIUMAppointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment SubmissionEPSS 0.3%CVE-2024-9836MEDIUMRSS Feed Widget < 3.0.0 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-6668MEDIUMprofilepro <= 1.3 - Subscriber+ Stored Cross Site ScriptingEPSS 0.3%CVE-2025-3502LOWWP Maps < 4.7.2 - Admin+ Stored XSSEPSS 0.3%CVE-2022-1112—Autolinks <= 1.0.1 - Stored Cross-Site Scripting via CSRFEPSS 0.3%CVE-2026-13172MEDIUMEventin < 4.1.22 - Unauthenticated Unpublished Content DisclosureEPSS 0.3%