Vulnerabilidades en Unknown
5585 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-14287MEDIUMTenWeb Speed Optimizer < 2.33.5 - Unauthenticated Stored XSS via Critical CSS Token BypassEPSS 0.2%CVE-2024-3823LOWBase64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRFEPSS 0.2%CVE-2026-93528LOWNP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request PageEPSS 0.2%CVE-2026-11570MEDIUMUser Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author NameEPSS 0.2%CVE-2023-6529MEDIUMWP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSSEPSS 0.2%CVE-2021-24559MEDIUMQyrr < 0.7 - Authenticated (contributor+) Stored XSSEPSS 0.2%CVE-2026-86842MEDIUMReal3D Flipbook Lite < 5.4 - Author+ Content Deletion and Stored XSS via Global Settings OverwriteEPSS 0.2%CVE-2025-9034MEDIUMWp Edit Password Protected < 1.3.5 - Open RedirectEPSS 0.2%CVE-2025-1622LOWGDPR Cookie Compliance < 4.15.7 - Admin+ Stored XSSEPSS 0.2%CVE-2023-6633MEDIUMSite Notes <= 2.0.0 - Admin Note Deletion via CSRFEPSS 0.2%CVE-2026-0929MEDIUMRegistrationMagic < 6.0.7.2 - Subscriber+ Form CreationEPSS 0.2%CVE-2026-1661MEDIUMWP Mail Logging < 1.17.0 - Unauthenticated HTML InjectionEPSS 0.2%CVE-2026-86838MEDIUMBookly < 28.3 - Unauthenticated Payment Bypass via Booking Price ManipulationEPSS 0.2%CVE-2023-6292MEDIUMEcwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRFEPSS 0.2%CVE-2026-85568MEDIUMUnlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' ParameterEPSS 0.2%CVE-2026-91847MEDIUMBookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOREPSS 0.2%CVE-2024-12301MEDIUMJSP Store Locator <= 1.0 - Deletion via Missing CSRFEPSS 0.2%CVE-2026-93000MEDIUMSPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via SearchEPSS 0.2%CVE-2023-7203MEDIUMSmart Forms < 2.6.87 - Subscriber+ Arbitrary Entry DeletionEPSS 0.2%CVE-2026-13407MEDIUMRoyal Elementor Addons < 1.7.1067 - Unauthenticated Stored HTML Injection in Form Notification EmailsEPSS 0.2%