Vulnerabilidades en Unknown
5582 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-11882LOWBuilderall for WordPress < 3.0.2 - Unauthenticated OAuth Access Token Poisoning via Public REST RoutesEPSS 0.3%CVE-2024-5167HIGHCM Email Registration Blacklist and Whitelist < 1.4.9 - Add/Delete Emails via CSRF Add and delete any item from blacklist/whitelistEPSS 0.3%CVE-2024-10151MEDIUMAuto iFrame < 2.0 - Contributor+ XSS via ShortcodeEPSS 0.3%CVE-2025-13471MEDIUMUser Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option UpdateEPSS 0.3%CVE-2025-10720MEDIUMWP Private Content Plus <= 3.6.2 - Password Protection BypassEPSS 0.3%CVE-2026-81423MEDIUMAccept Stripe Payments < 2.1.4 - Open Redirect via IPN HandlerEPSS 0.3%CVE-2026-81583MEDIUMTheme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege EscalationEPSS 0.3%CVE-2024-12807MEDIUMSocial Share Buttons for WordPress <= 2.7 - Admin+ Stored XSSEPSS 0.3%CVE-2025-15445MEDIUMRestaurant Cafeteria <= 0.4.6 - Subscriber+ Arbitrary Plugin Installation/ActivationEPSS 0.3%CVE-2025-8942CRITICALWP Hotel Booking < 2.2.3 - Subscriber+ Rating ManipulationEPSS 0.3%CVE-2024-13482MEDIUMIcegram Engage < 3.1.32 - Admin+ Stored XSSEPSS 0.3%CVE-2025-9314CRITICALDeveloper Tools <= 1.1.3 – Unauthenticated Arbitrary File UploadEPSS 0.3%CVE-2024-10076MEDIUMJetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-12972MEDIUMPayPlus Payment Gateway < 8.2.2 - Unauthenticated Order Payment Metadata TamperingEPSS 0.3%CVE-2024-10678MEDIUMUltimate Blocks < 3.2.4 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-14231MEDIUMLifterLMS < 10.0.10 - Subscriber+ Sensitive Information Disclosure via select2_query_postsEPSS 0.3%CVE-2026-85572MEDIUMTutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment DisclosureEPSS 0.3%CVE-2026-85349MEDIUMFluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOREPSS 0.3%CVE-2026-78138MEDIUMFinale Lite < 2.21.0 - Subscriber+ Campaign Configuration Disclosure via wcct_quick_view_htmlEPSS 0.3%CVE-2025-0613MEDIUMPhoto Gallery < 1.8.34 - Unauthenticated Stored XSSEPSS 0.3%