Vulnerabilidades en Unknown
5582 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-12982MEDIUMDocument Gallery < 5.1.1 - Reflected XSS via dg_generate_galleryEPSS 0.3%CVE-2026-14834MEDIUMMailgun for WordPress < 2.2.1 - Unauthenticated Arbitrary Mailgun List Subscription via add_list AJAXEPSS 0.3%CVE-2026-14592MEDIUMWP Real IP-based Access Control <= 1.3.1 - Unauthenticated Stored XSS via acl_ctrl_addrEPSS 0.3%CVE-2026-16032MEDIUMLWS Optimize < 4.1.2 - Unauthenticated Stored XSS via Real User MonitoringEPSS 0.3%CVE-2024-13874HIGHFeedify – Web Push Notifications < 2.4.6 - Reflected XSSEPSS 0.3%CVE-2026-14315MEDIUMPixel Tag Manager for WooCommerce < 2.2.1 - Unauthenticated Forged Conversion Event SubmissionEPSS 0.3%CVE-2026-86812MEDIUMWPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST APIEPSS 0.3%CVE-2026-16535MEDIUMLink Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabelEPSS 0.3%CVE-2026-77010MEDIUMHEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code BypassEPSS 0.3%CVE-2026-17565HIGHAnimation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request ForgeryEPSS 0.3%CVE-2026-15032MEDIUMwpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL ConversionEPSS 0.3%CVE-2026-15383MEDIUMBlog Floating Button <= 1.4.20 - Unauthenticated Stored XSS via User-Agent HeaderEPSS 0.3%CVE-2026-11965MEDIUMUser Registration & Membership < 5.2.0 - Unauthenticated Paid Membership BypassEPSS 0.3%CVE-2026-90923MEDIUMAutopay < 5.0.1 - Unauthenticated Cross-Customer Order Payment Parameter Disclosure and DeletionEPSS 0.3%CVE-2026-11371MEDIUMBetterDocs < 4.5.5 - Unauthenticated Stored XSS via AI Doc Summarizer Prompt InjectionEPSS 0.3%CVE-2026-75793MEDIUMSureCart < 4.7.0 - Unauthenticated Account Creation with Automatic LoginEPSS 0.3%CVE-2026-18037MEDIUMCreate by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and PublicationEPSS 0.3%CVE-2026-5776MEDIUMEmail Encoder < 2.4.7 - Unauthenticated Stored XSSEPSS 0.3%CVE-2024-12400HIGHTourmaster < 5.3.5 - Reflected XSSEPSS 0.3%CVE-2024-12321HIGHWC Affiliate <= 2.3.9 - Reflected XSSEPSS 0.3%