Vulnerabilidades en Unknown

5576 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2025-3583LOWNewsletter < 8.7.1 - Admin+ Stored XSSEPSS 0.3%CVE-2023-5884—Word Balloon < 4.20.3 - Avatar Removal via CSRFEPSS 0.3%CVE-2025-3513LOWSureForms < 1.4.4 - Admin+ Stored XSSEPSS 0.3%CVE-2022-4426MEDIUMMautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRFEPSS 0.3%CVE-2025-9698MEDIUMThe Plus Addons for Elementor < 6.3.16 - Author+ Stored XSSEPSS 0.3%CVE-2024-2310MEDIUMWP Google Review Slider < 13.6 - Admin+ Stored XSSEPSS 0.3%CVE-2026-101148CRITICALBackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration KeyEPSS 0.3%CVE-2023-2326—Gravity Forms Google Sheet Connector < 1.3.5 - Access Code Update via CSRFEPSS 0.3%CVE-2023-1624MEDIUMWPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRFEPSS 0.3%CVE-2023-3508MEDIUMWooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRFEPSS 0.3%CVE-2026-92425MEDIUMHydra Booking < 1.2.4 - Hydra Host+ Cross-Host Account Modification and Deletion via IDOREPSS 0.3%CVE-2026-86782MEDIUMVisualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOREPSS 0.3%CVE-2023-0500MEDIUMWP Film Studio < 1.3.5 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2025-11191MEDIUMRealPress < 1.1.0 - Unauthenticated Content Creation/Email Sending via RESTEPSS 0.3%CVE-2023-3507MEDIUMWooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRFEPSS 0.3%CVE-2023-3720MEDIUMUpload Media By URL < 1.0.8 - Stored XSS via CSRF EPSS 0.3%CVE-2023-0501MEDIUMWP Insurance < 2.1.4 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2026-18934MEDIUMRSS Aggregator by Feedzy < 5.2.6 - Author+ Cross-User Import Job Manipulation and Post DeletionEPSS 0.3%CVE-2024-4477MEDIUMWP Logs Book <= 1.0.1 - Unauthenticated Stored XSSEPSS 0.3%CVE-2024-13208MEDIUMWP Google Map < 1.9.4 - Admin+ Stored XSSEPSS 0.3%