Vulnerabilidades en Unknown
5444 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2023-2601—WP Brutal AI < 2.0.0 - SQL Injection via CSRFEPSS 1.8%CVE-2021-24229—Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX actionEPSS 1.8%CVE-2022-0836—SEMA API < 4.02 - Unauthenticated SQLiEPSS 1.8%CVE-2022-0234—WOOCS < 1.3.7.5 - Reflected Cross-Site ScriptingEPSS 1.8%CVE-2021-24233—Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)EPSS 1.7%CVE-2022-0782—Donations <= 1.8 - Unauthenticated SQLiEPSS 1.7%CVE-2022-0657—5 Stars Rating Funnel < 1.2.53 - Unauthenticated SQLiEPSS 1.7%CVE-2024-7786HIGHSensei LMS < 4.24.2 - Unauthenticated Email Template LeakEPSS 1.7%CVE-2021-24183—Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_formEPSS 1.7%CVE-2021-24182—Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_questionEPSS 1.7%CVE-2023-2688MEDIUMWordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path TraversalEPSS 1.7%CVE-2021-24916—Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail SendingEPSS 1.7%CVE-2023-0099—Simple URLs < 115 - Multiple Reflected XSSEPSS 1.7%CVE-2021-24430—Speed Booster Pack 4.2.0-beta - Authenticated (admin+) RCEEPSS 1.7%CVE-2022-0150—WP Accessibility Helper (WAH) < 0.6.0.7 - Reflected Cross-Site Scripting (XSS)EPSS 1.7%CVE-2022-1953—Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File DeletionEPSS 1.7%CVE-2022-0248—Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSSEPSS 1.7%CVE-2021-4225—SP Project & Document Manager < 4.24 - Subscriber+ Shell UploadEPSS 1.7%CVE-2023-1208—HTTP Headers < 1.18.11 - Admin+ Remote Code ExecutionEPSS 1.7%CVE-2021-24435—Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)EPSS 1.7%