Vulnerabilidades en Unknown
5582 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-13400MEDIUMSimply Schedule Appointments < 1.6.12.4 - Unauthenticated Stored XSS via Booking Customer InformationEPSS 0.3%CVE-2026-16583MEDIUMOrbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG UploadEPSS 0.3%CVE-2026-14921MEDIUMUltimate Addons for WPBakery Page Builder < 3.21.5 - Contributor+ Stored XSS via ult_buttons ShortcodeEPSS 0.3%CVE-2024-7859MEDIUMVisual Sound <= 1.03 - Settings Update via CSRFEPSS 0.3%CVE-2026-10082MEDIUMAdvanced Ads – Ad Manager & AdSense < 2.0.23 - Contributor+ Stored XSS via the_ad Shortcode 'ad_args' ParameterEPSS 0.3%CVE-2026-13330MEDIUMAnimation Addons for Elementor < 2.7.0 - Author+ Stored XSS via SVG UploadEPSS 0.3%CVE-2025-3745MEDIUMWP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSSEPSS 0.3%CVE-2024-3919MEDIUMOpenPGP Form Encryption for WordPress < 1.5.1 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-14841MEDIUMKing Addons for Elementor < 51.1.76 - Reflected XSS via Posts Grid WidgetEPSS 0.3%CVE-2026-4110MEDIUMUltimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_listEPSS 0.3%CVE-2026-9066MEDIUMWP Compress < 7.10.04 - Reflected XSS via test_zoneEPSS 0.3%CVE-2026-14922MEDIUMWP Photo Album Plus < 9.2.04.003 - Subscriber+ Stored XSS via Photo CommentEPSS 0.3%CVE-2026-14331MEDIUMSubscribe2 < 10.46 - Reflected XSS via email ParameterEPSS 0.3%CVE-2025-8281HIGHWP Talroo <= 2.4 - Reflected XSSEPSS 0.3%CVE-2026-11881MEDIUMFluent Forms < 6.2.6 - Contributor+ Stored XSS via Date/Time FieldEPSS 0.3%CVE-2024-2843MEDIUMWooCommerce Customers Manager < 30.1 - User Deletion via CSRFEPSS 0.3%CVE-2025-15678MEDIUMNexter Blocks < 5.0.2 - Author+ Stored XSS via SVG UploadEPSS 0.3%CVE-2023-4209MEDIUMPOEditor < 0.9.8 - Settings Reset via CSRFEPSS 0.3%CVE-2023-4318MEDIUMHerd Effects < 5.2.4 - Effect Deletion via CSRFEPSS 0.3%CVE-2023-0499MEDIUMQuickSwish < 1.1.0 - Arbitrary Plugin Activation via CSRFEPSS 0.3%