Vulnerabilidades en Unknown
5585 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2025-6200MEDIUMGeoDirectory < 2.8.120 - Contributor+ Stored XSSEPSS 0.2%CVE-2026-81655HIGHAd Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom FieldsEPSS 0.2%CVE-2026-80438MEDIUMNinja Forms 3.14.0 - 3.15.1 - Authenticated Arbitrary Post Modification and Sensitive Information Disclosure via Abilities REST APIEPSS 0.2%CVE-2026-82195MEDIUM10Web Booster < 2.34.0 - Unauthenticated Connection Secret Disclosure and DeletionEPSS 0.2%CVE-2025-13071HIGHCustom Admin Menu <= 1.0.0 - Reflected XSSEPSS 0.2%CVE-2026-80341MEDIUMPayment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOREPSS 0.2%CVE-2026-19860MEDIUMJetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation CallbackEPSS 0.2%CVE-2026-19423HIGHUltimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile FormsEPSS 0.2%CVE-2026-12696MEDIUMwpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location FieldEPSS 0.2%CVE-2026-16942MEDIUMWP Custom HTML Pages <= 0.6.2 - Author+ Stored XSSEPSS 0.2%CVE-2026-18395MEDIUMChild Pages Card < 1.09 - Contributor+ Stored XSS via Shortcode AttributesEPSS 0.2%CVE-2026-19718HIGHBlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key RecoveryEPSS 0.2%CVE-2026-10531MEDIUMAI Share & Summarize < 2.0.4 - Contributor+ Stored XSS via title_style Shortcode AttributeEPSS 0.2%CVE-2026-15262MEDIUMAdmin Columns for ACF Fields <= 0.3.2 - Contributor+ Stored XSS via ACF Field Value ColumnEPSS 0.2%CVE-2026-15249MEDIUMPatterns Kit <= 1.0.3 - Contributor+ Stored XSS via YouTube Popup LinkEPSS 0.2%CVE-2024-6925MEDIUMTrueBooker < 1.0.3 - Settings Update via CSRFEPSS 0.2%CVE-2026-84096HIGHWP Review Slider Pro < 12.7.12 - Subscriber+ Stored XSS via Review Form FieldsEPSS 0.2%CVE-2024-1306MEDIUMSmart Forms < 2.6.94 - Edit Entries via CSRFEPSS 0.2%CVE-2026-16273MEDIUMNarrative Publisher <= 1.0.7 - Contributor+ Stored XSS via narrative_post_script Post MetaEPSS 0.2%CVE-2026-8378MEDIUMFrontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File RenameEPSS 0.2%