Vulnerabilidades en Unknown
5582 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-77704LOWAmelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-ApprovalEPSS 0.3%CVE-2026-14214LOWAmelia < 2.4.4 - Amelia Manager+ Arbitrary User-Field Modification via Mass AssignmentEPSS 0.3%CVE-2026-84927LOWEmbedPress 4.6.0 - 4.6.3 - Contributor+ Google Reviews ModificationEPSS 0.3%CVE-2026-14825LOWQuiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOREPSS 0.3%CVE-2026-11578LOWFluent Forms < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOREPSS 0.3%CVE-2024-5473MEDIUM Simple Photoswipe <= 0.1 - Admin+ Stored XSSEPSS 0.3%CVE-2024-12683LOWSmart Maintenance Mode < 1.5.2 - Admin+ Stored XSSEPSS 0.3%CVE-2023-0497MEDIUMHT Portfolio < 1.1.6 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2026-19225MEDIUMDefender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on MultisiteEPSS 0.3%CVE-2026-14821LOWQuiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template DeletionEPSS 0.3%CVE-2026-77003LOWContent Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_maskEPSS 0.3%CVE-2026-16070LOWBrizy - Page Builder < 2.8.19 - Contributor+ Template Type Update via IDOREPSS 0.3%CVE-2026-77787LOWRank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulkEPSS 0.3%CVE-2026-10753LOWSite Kit by Google < 1.176.0 - Editor+ Email Reporting Settings UpdateEPSS 0.3%CVE-2026-89007LOWBookit < 2.6.0.5 - Bookit Staff+ Arbitrary Appointment Deletion via Missing AuthorizationEPSS 0.3%CVE-2026-16577LOWDokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied AmountEPSS 0.3%CVE-2026-15381LOWWP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filterEPSS 0.3%CVE-2026-12907LOWRTMKit Addons for Elementor < 2.0.9 - Author+ Site-Wide Theme Builder Template Creation and ActivationEPSS 0.3%CVE-2025-14434MEDIUMUltimate Post Kit < 4.0.16 – Unauthenticated Arbitrary Post Content DisclosureEPSS 0.3%CVE-2025-1625MEDIUMQi Blocks < 1.4 - Contributor+ Stored XSS via Counter BlockEPSS 0.3%