Vulnerabilidades en Unknown
5585 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-96899MEDIUMOptima Express 8.6.0 - 8.7.5 - Author+ Stored XSS via faq_scriptEPSS 0.2%CVE-2026-91073MEDIUMSubscribe Forms 1.4.1 - 1.6.2 - Author+ Stored XSS via Attention Effect Form SettingEPSS 0.2%CVE-2026-92411MEDIUMWP Delicious < 1.10.8 - Contributor+ Stored XSS via Recipe Block Tag NameEPSS 0.2%CVE-2026-92424MEDIUMContent Egg < 11.9.0 - Contributor+ Stored XSS via Import QueueEPSS 0.2%CVE-2026-13406MEDIUMRoyal Elementor Addons < 1.7.1066 - Unauthenticated Taxonomy Term DisclosureEPSS 0.2%CVE-2026-85001MEDIUMEmbedPress 4.4.9 - 4.6.6 - Contributor+ Stored XSS via Elementor Widget showTitle AttributeEPSS 0.2%CVE-2026-87777MEDIUMHostinger Reach 1.0.6 - 1.8.2 - Contributor+ Stored XSS via formId Elementor Widget AttributeEPSS 0.2%CVE-2026-89006MEDIUMWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Stored XSS via Feed ImportEPSS 0.2%CVE-2026-14844MEDIUMMaster Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode AttributesEPSS 0.2%CVE-2026-85415MEDIUMAudio Player Block 1.1.0 - 1.6.2 - Contributor+ Stored XSS via Audio Download URLEPSS 0.2%CVE-2026-96895MEDIUMWP YouTube Lyte < 1.7.31 - Contributor+ Stored XSS via Embed Block AttributesEPSS 0.2%CVE-2025-9487MEDIUMAdmin and Site Enhancements < 7.9.8 - Authenticated Stored XSS via SVGEPSS 0.2%CVE-2026-19251MEDIUMUltimate Member < 2.13.0 - Unauthenticated Unapproved Comment Disclosure via Profile ActivityEPSS 0.2%CVE-2026-12526HIGHAdvanced Custom Fields: Extended < 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update ActionEPSS 0.2%CVE-2026-16262HIGHEstatik < 4.3.3 - Login CSRFEPSS 0.2%CVE-2026-84225LOWKirki 6.0.0 - 6.2.5 - Authenticated Collaboration Comment Status Modification via IDOREPSS 0.2%CVE-2025-8944MEDIUMOceanWP < 4.1.2 - Subscriber+ Limited Option UpdateEPSS 0.2%CVE-2026-83560MEDIUMNew User Approve 3.1.0 - 3.2.9 - Unauthenticated PII Disclosure via Zapier API Key BypassEPSS 0.2%CVE-2026-14823LOWEvent Tickets < 5.29.0.1 - Contributor+ Seating Layout and Ticket Inventory Modification via IDOREPSS 0.2%CVE-2026-12510MEDIUMAI Engine < 3.5.5 - Subscriber+Chatbot Discussion Disclosure and Takeover via IDOREPSS 0.2%