Vulnerabilidades en Unknown
5582 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-84026MEDIUMDirectorist 8.1 - 8.9.4 - Unauthenticated Sensitive Data Disclosure via REST Users EndpointEPSS 0.3%CVE-2026-6495HIGHAjax Load More < 7.8.4 - Reflected XSSEPSS 0.3%CVE-2026-14870HIGHDatabase for Contact Form 7, WPforms, Elementor forms < 1.5.3 - Reflected XSS via form_idEPSS 0.3%CVE-2026-84741MEDIUMThe Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST APIEPSS 0.3%CVE-2026-4259HIGHUltimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctionsEPSS 0.3%CVE-2025-1454MEDIUMNinja Pages <= 1.4.2 - Admin+ Stored XSSEPSS 0.3%CVE-2026-19056HIGHProSolution WP Client < 2.0.11 - Reflected XSS via 'page' ParameterEPSS 0.3%CVE-2026-14567MEDIUMWP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User DirectoryEPSS 0.3%CVE-2026-12970HIGHLearnPress < 4.4.1 - Reflected XSS via c_searchEPSS 0.3%CVE-2026-77115HIGHBrave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM ParametersEPSS 0.3%CVE-2026-19055HIGHProSolution WP Client < 2.0.11 - Reflected XSS via Multiple ParametersEPSS 0.3%CVE-2026-84168MEDIUMEasy Hide Login < 1.7 - Login Page Protection Bypass / Hidden URL DisclosureEPSS 0.3%CVE-2026-16576HIGHDokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST APIEPSS 0.3%CVE-2026-16984MEDIUMWP Legal Pages < 3.7.1 - Unauthenticated API Secret DisclosureEPSS 0.3%CVE-2026-75823HIGHWP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role EncryptionEPSS 0.3%CVE-2024-4531HIGHBusiness Card <= 1.0.0 - Card Edit via CSRFEPSS 0.3%CVE-2026-77006CRITICALWebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path TraversalEPSS 0.2%CVE-2026-11366LOWMonsterInsights < 11.1.0 - Unauthenticated Measurement Protocol Secret Update via Empty-Key HMAC BypassEPSS 0.2%CVE-2025-6234MEDIUMHostel < 1.1.5.8 - Reflected XSSEPSS 0.2%CVE-2026-15054LOWBit Form < 3.1.2 - Unauthenticated Inactive Form SubmissionEPSS 0.2%