Vulnerabilidades en Unknown
5582 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-14306MEDIUMTutor LMS < 3.9.14 - Subscriber+ Paid Course Content Disclosure via Enrollment Check BypassEPSS 0.3%CVE-2026-15214MEDIUMSubscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOREPSS 0.3%CVE-2026-19075MEDIUMAll-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' ParameterEPSS 0.3%CVE-2026-13145MEDIUMWP Travel < 11.8.1 - Subscriber+ Booking PII Disclosure via IDOREPSS 0.3%CVE-2026-16979MEDIUMSmartCrawl < 3.16.3 - Subscriber+ Private/Draft Post Title Disclosure and Post Meta Key EnumerationEPSS 0.3%CVE-2026-14847MEDIUMPaid Member Subscriptions < 3.0.7 - Subscriber+ Payment Data Disclosure via IDOREPSS 0.3%CVE-2026-14938MEDIUMFluentBoards < 1.95.3 - Subscriber+ Cross-Board Task Disclosure via IDOREPSS 0.3%CVE-2026-14223MEDIUMEasy Appointments < 3.12.28 - Subscriber+ Customer PII Disclosure via IDOREPSS 0.3%CVE-2026-14858MEDIUMWP Crowdfunding < 2.2.1 - Subscriber+ Order Data Disclosure via IDOREPSS 0.3%CVE-2023-5990—Funnelforms Free < 3.4.2 - Form Deletion/Duplication via CSRFEPSS 0.3%CVE-2026-12397MEDIUMWP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOREPSS 0.3%CVE-2026-77116MEDIUMBrave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via PreviewEPSS 0.3%CVE-2026-81194MEDIUMMasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id ParameterEPSS 0.3%CVE-2026-12376MEDIUMAcademy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST EndpointEPSS 0.3%CVE-2026-16295MEDIUMClearfy < 2.4.3 - Subscriber+ Sensitive Information Disclosure via Factory Page-Action DispatcherEPSS 0.3%CVE-2024-6496MEDIUMLight Poll <= 1.0.0 - Polls Deletion via CSRFEPSS 0.3%CVE-2023-53901HIGHWBCE CMS 1.6.1 Cross-Site Scripting and Open Redirect VulnerabilityEPSS 0.3%CVE-2026-85132MEDIUMWPLP Cookie Consent 4.0.2 - 4.4.1 - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scanEPSS 0.3%CVE-2026-17020MEDIUMSalon Booking System – Free Version <= 10.31.0 - Subscriber+ Arbitrary Booking PII DisclosureEPSS 0.3%CVE-2026-16056MEDIUMContest Gallery < 30.0.7 - Subscriber+ OpenAI Prompt History Disclosure via post_cg_get_openai_promptsEPSS 0.3%