Vulnerabilidades en Unknown
5576 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-13389MEDIUMWebToffee Cookie Consent < 3.5.3 - Consent Log Disclosure/Deletion, Page Creation & License Deactivation via Unprotected REST RoutesEPSS 0.3%CVE-2026-81428MEDIUMWC Vendors < 2.7.2.1 - Vendor+ Cross-Vendor Product and Arbitrary Post Modification via IDOREPSS 0.3%CVE-2026-19699LOWGutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data DisclosureEPSS 0.3%CVE-2024-6797MEDIUMDL Robots.txt <= 1.2 - Admin+ Stored XSSEPSS 0.3%CVE-2026-11867MEDIUMFrontend Admin by DynamiApps < 3.29.7 - Subscriber+ Taxonomy Term Creation/Modification/Deletion via Missing AuthorizationEPSS 0.3%CVE-2026-78150LOWPost Carousel 4.0.0 - 4.0.7 - Contributor+ Private and Protected Post Content Disclosure via saved-templates-duplicate IDOREPSS 0.3%CVE-2024-6462MEDIUMDL Yandex Metrika <= 1.2 - Admin+ Stored XSSEPSS 0.3%CVE-2025-9978MEDIUMJeg Elementor Kit < 2.7.0 - Author+ Stored XSSEPSS 0.3%CVE-2026-16276LOWClassified Listing < 5.4.4 - Contributor+ Store Revenue Total Disclosure via rtcl_revenue_order_searchEPSS 0.3%CVE-2026-16957LOWSlim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta DisclosureEPSS 0.3%CVE-2026-19711MEDIUMPremium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal RequestEPSS 0.3%CVE-2023-7168MEDIUMBetter Follow Button for Jetpack <= 8.0 - Admin+ Stored XSSEPSS 0.3%CVE-2026-15939LOWSimple Restrict < 1.2.9 - Contributor+ Restricted Content Disclosure via REST APIEPSS 0.3%CVE-2026-81196LOWMasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOREPSS 0.3%CVE-2026-13329MEDIUMWC Buckaroo BPE Gateway < 4.9.0 - Subscriber+ Unauthorized Order RefundEPSS 0.3%CVE-2026-16274LOWClassified Listing < 5.4.4 - Contributor+ Unpublished Post Content Disclosure via rtcl_block_css_get_postsEPSS 0.3%CVE-2026-16746LOWMultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST EndpointEPSS 0.3%CVE-2026-79615LOWQuiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOREPSS 0.3%CVE-2026-13598CRITICALRestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to AdministratorEPSS 0.3%CVE-2026-83543MEDIUMGreenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST EndpointEPSS 0.3%