Vulnerabilidades en Unknown
5576 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2025-15671MEDIUMWelcart e-Commerce < 2.12.1 - Session Fixation via uscesid ParameterEPSS 0.3%CVE-2024-11718MEDIUMtarteaucitron.js for WordPress < 0.3.0 - Author+ Stored XSSEPSS 0.3%CVE-2024-8851MEDIUMPolls CP <= 1.0.75 - Admin+ Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-9645MEDIUMPost Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-15237MEDIUMHotel Booking Lite < 6.2.3 - Unauthenticated Payment Record Creation via Checkout Payments REST EndpointEPSS 0.3%CVE-2022-1764—WP-chgFontSize <= 1.8 - Arbitrary Settings Update via CSRF to Stored XSSEPSS 0.3%CVE-2022-0642—JivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRFEPSS 0.3%CVE-2026-77702MEDIUMEventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_tokenEPSS 0.3%CVE-2026-85123MEDIUMEasy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Registration Policy Bypass via Login Form Type ConfusionEPSS 0.3%CVE-2026-12276MEDIUMLA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open RegistrationEPSS 0.3%CVE-2022-1763—Static Page eXtended <= 2.1 - Arbitrary Settings Update via CSRF to Stored XSSEPSS 0.3%CVE-2026-91015MEDIUMMaster Addons for Elementor < 3.1.9 - Unauthenticated Popup Deactivation via jltma_popup_disable_expiredEPSS 0.3%CVE-2022-1626—Sharebar <= 1.4.1 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.3%CVE-2026-75798MEDIUMAI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor AssistantEPSS 0.3%CVE-2026-14843MEDIUMEvents Made Easy < 3.1.4 - Unauthenticated Person Data Modification via IDOREPSS 0.3%CVE-2026-16282MEDIUMAppointment Hour Booking < 1.5.88 - Unauthenticated Booking Price Manipulation via tcost ParameterEPSS 0.3%CVE-2026-14822MEDIUMEvent Tickets < 5.29.0.1 - Unauthenticated PayPal Order Status ManipulationEPSS 0.3%CVE-2026-77694MEDIUMEventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_tokenEPSS 0.3%CVE-2026-17021MEDIUMSalon Booking System – Free Version < 10.30.34 - Unauthenticated Arbitrary Booking Total TamperingEPSS 0.3%CVE-2026-11868MEDIUMWP Travel < 11.7.1 - Unauthenticated Arbitrary Booking CancellationEPSS 0.3%