Vulnerabilidades en Unknown

5582 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-12723MEDIUMInfility Global <= 2.9.8 - Reflected XSSEPSS 0.3%CVE-2024-13875HIGHWP Programmmanager <= 1.2 - Reflected XSSEPSS 0.3%CVE-2023-0761MEDIUMClock In Portal <= 2.1 - Staff Deletion via CSRFEPSS 0.3%CVE-2023-0762MEDIUMClock In Portal <= 2.1 - Designation Deletion via CSRFEPSS 0.3%CVE-2025-13417HIGHPlugin Organizer < 10.2.4 - Subscriber+ SQLiEPSS 0.3%CVE-2023-0763MEDIUMClock In Portal <= 2.1 - Holidays Deletion via CSRFEPSS 0.3%CVE-2023-0484MEDIUMContact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks < 1.1.6 - Arbitrary Plugin Activation via CSRFEPSS 0.3%CVE-2025-2942MEDIUMOrder Delivery Date Pro for WooCommerce < 12.6.0 - Unauthenticated Arbitrary Post Title DisclosureEPSS 0.3%CVE-2026-16259CRITICALUix UserCenter <= 1.0.3 - Unauthenticated Privilege EscalationEPSS 0.3%CVE-2026-16061HIGHRest Routes <= 5.5.5 - Unauthenticated SQLi via custom-tables/tables/{table_name}EPSS 0.3%CVE-2026-14563CRITICALAdvanced Customized Prompts <= 1.0.1 - Unauthenticated Account TakeoverEPSS 0.3%CVE-2022-3451MEDIUMProduct Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX CallsEPSS 0.3%CVE-2026-14559CRITICALTeddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account TakeoverEPSS 0.3%CVE-2024-2232HIGHHimer - Social Questions and Answers < 2.1.3 - CSRF While Sending the InvitesEPSS 0.3%CVE-2024-3477MEDIUMPopup Box < 2.2.7 - Popup Deletion via CSRFEPSS 0.3%CVE-2022-4124MEDIUMPopup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup DeletionEPSS 0.3%CVE-2022-3149MEDIUMWP Custom Cursors < 3.0.1 - Stored Cross-Site Scripting via CSRFEPSS 0.3%CVE-2026-92994HIGHVerge3D < 4.13.1 - Unauthenticated Stored XSS via File Storage APIEPSS 0.3%CVE-2026-86609HIGHDownload Manager Pro < 7.5.6 - Unauthenticated Stored XSS via Email Lock SubscriptionEPSS 0.3%CVE-2024-4532MEDIUMBusiness Card <= 1.0.0 - Arbitrary Card Deletion via CSRFEPSS 0.3%