Vulnerabilidades en Unknown
5582 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-4552MEDIUMFL3R FeelBox <= 8.1 - Settings Update via CSRF to Stored XSSEPSS 0.3%CVE-2026-1235MEDIUMWP eCommerce <= 3.15.1 - Unauthenticated PHP Object InjectionEPSS 0.3%CVE-2026-12273MEDIUMTutor LMS < 3.9.13 - Subscriber+ Arbitrary Auto-Approved Comment CreationEPSS 0.3%CVE-2026-11887MEDIUMSalon Booking System < 10.30.20 - Subscriber+ Booking Approval BypassEPSS 0.3%CVE-2026-14853MEDIUMWooCommerce Bookings < 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing AuthorizationEPSS 0.3%CVE-2023-5979—eCommerce Product Catalog Plugin for WordPress < 3.3.26 - Products Deletion via CSRFEPSS 0.3%CVE-2026-18960MEDIUMBlock User Account < 2.0.1 - Subscriber+ Account Block Bypass via Application PasswordsEPSS 0.3%CVE-2024-3475HIGHSticky Buttons < 3.2.4 - Button Deletion via CSRFEPSS 0.3%CVE-2026-13726HIGHMultiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcodeEPSS 0.3%CVE-2026-13725HIGHDynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjaxEPSS 0.3%CVE-2026-8089HIGHweMail < 2.1.3 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2025-15690MEDIUMContent Mask 1.7.1 - 1.8.5.5 - Contributor+ Stored XSS via Post Scripts and StylesEPSS 0.3%CVE-2025-4133MEDIUMBlog2Social: Social Media Auto Post & Scheduler < 8.4.0 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-12978HIGHFunnelKit < 3.15.0.6 - Reflected XSS via Divi Optin FormEPSS 0.3%CVE-2026-81404HIGHIPGP Visitors Origin < 1.6 - Reflected XSSEPSS 0.3%CVE-2026-91014HIGHRealtyna Organic IDX plugin + WPL Real Estate < 5.4.2 - Reflected XSS via Location Selector EndpointEPSS 0.3%CVE-2026-6268HIGHEventPress < 22.2 – Reflected Cross-Site ScriptingEPSS 0.3%CVE-2026-9833HIGHTag Groups < 2.2.0 - Reflected XSS via 'tag_groups_task' ParameterEPSS 0.3%CVE-2026-86444HIGHLearnPress < 4.4.7 - Reflected XSS via 'skin' ParameterEPSS 0.3%CVE-2026-10755LOWAll in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI IntegrationEPSS 0.3%