Vulnerabilidades en Unknown
5585 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-12081MEDIUMDatabase for Contact Form 7, WPforms, Elementor forms < 1.5.2 - Unauthenticated PHP Object Injection via Entry File FieldEPSS 0.2%CVE-2024-1231MEDIUMCM Download and File Manager < 2.9.0 - Download Unpublish via CSRFEPSS 0.2%CVE-2025-7808MEDIUMWP Shopify < 1.5.4 - Reflected XSSEPSS 0.2%CVE-2023-6385MEDIUMWordPress Ping Optimizer <= 2.35.1.3.0 - Log Clearing via CSRFEPSS 0.2%CVE-2024-6720MEDIUMLight Poll <= 1.0.0 - Poll Answers Deletion via CSRFEPSS 0.2%CVE-2024-6719HIGHOffload Videos – Bunny.net, AWS S3 <= 1.0.1 Subscriber+ CSRFEPSS 0.2%CVE-2024-8044MEDIUMinfolinks Ad Wrap <= 1.0.2 - Settings Update via CSRFEPSS 0.2%CVE-2026-16593MEDIUMWP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget SettingsEPSS 0.2%CVE-2021-25117MEDIUMWP Postratings < 1.86.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.2%CVE-2024-5028MEDIUMCM WordPress Search And Replace Plugin < 1.3.9 - Plugin Reset via CSRFEPSS 0.2%CVE-2024-3582MEDIUMUngallery <= 2.2.4 - Stored XSS via CSRFEPSS 0.2%CVE-2025-13031MEDIUMWPeMatico RSS Feed Fetcher < 2.8.13 - Contributor+ Stored XSSEPSS 0.2%CVE-2026-81026MEDIUMMasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPNEPSS 0.2%CVE-2023-3510—FTP Access <= 1.0 - Subscriber+ Stored XSSEPSS 0.2%CVE-2026-84740MEDIUMThe Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode Execution via 'view_data' ParameterEPSS 0.2%CVE-2024-3478MEDIUMHerd Effects < 5.2.7 - Effect Deletion via CSRFEPSS 0.2%CVE-2025-8113MEDIUMEbook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']EPSS 0.2%CVE-2026-2626HIGHDivi Booster < 5.0.2 - Unauthenticated PHP Object InjectionEPSS 0.2%CVE-2025-8046MEDIUMInjection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']EPSS 0.2%CVE-2026-89004LOWWPeMatico RSS Feed Fetcher < 2.8.26 - Contributor+ Campaign Configuration and Log Disclosure via IDOREPSS 0.2%