Vulnerabilidades en Unknown
5576 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-14305MEDIUMWP Delicious < 1.10.2 - Unauthenticated Arbitrary Post Meta Update via recipe_likesEPSS 0.3%CVE-2026-11966MEDIUMUser Registration & Membership < 5.2.3 - Unauthenticated Limited User Deletion via Stripe Subscription HandlerEPSS 0.3%CVE-2026-16962MEDIUMTamara Checkout <= 1.9.9.20 - Unauthenticated Order Status ManipulationEPSS 0.3%CVE-2024-12567MEDIUMEmail Subscribers < 5.7.45 - Admin+ Stored XSSEPSS 0.3%CVE-2024-1219MEDIUMEasy Social Feed < 6.5.6 - Contributor+ Stored XSSEPSS 0.3%CVE-2022-3025MEDIUMBitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRFEPSS 0.3%CVE-2024-10631MEDIUMCountdown Timer <= 1.0.5 - Contributor+ Stored XSSEPSS 0.3%CVE-2024-12568MEDIUMEmail Subscribers < 5.7.45 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12566MEDIUMEmail Subscribers < 5.7.45 - Admin+ Stored XSSEPSS 0.3%CVE-2022-2387MEDIUMEasy Digital Downloads < 3.0 - Arbitrary Post Deletion via CSRFEPSS 0.3%CVE-2024-4665MEDIUMEventPrime – Events Calendar, Bookings and Tickets < 3.5.0 - Subscriber+ Arbitrary booking settings updateEPSS 0.3%CVE-2022-2312—Student Result or Employee Database < 1.7.5 - Stored Cross Site Scripting via CSRFEPSS 0.3%CVE-2023-0889MEDIUMTF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option UpdateEPSS 0.3%CVE-2024-13825MEDIUMEmail Keep <= 1.1 - Reflected XSSEPSS 0.3%CVE-2026-16591HIGHWP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon FieldsEPSS 0.3%CVE-2025-3516MEDIUMSimple Lightbox < 2.9.4 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-75861MEDIUMUltimate Gift Cards for WooCommerce < 3.2.10 - Subscriber+ Gift Card Theft and Destruction via Unauthorized RedemptionEPSS 0.3%CVE-2026-14187LOWTutor LMS < 4.0.6 - Instructor+ Cross-Instructor Private Course Disclosure via IDOREPSS 0.3%CVE-2025-15674LOWContent Protector (Passster) < 4.3.7 - Contributor+ Protected Content Disclosure via Core REST APIEPSS 0.3%CVE-2026-76559MEDIUMWP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL HandlingEPSS 0.3%