Vulnerabilidades en Unknown
5591 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-3472MEDIUMModal Window < 5.3.10 - Modal Deletion via CSRFEPSS 0.2%CVE-2026-14212MEDIUMAmelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOREPSS 0.2%CVE-2023-5519MEDIUMEventPrime < 3.2.0 - Booking Creation via CSRFEPSS 0.2%CVE-2024-12280MEDIUMWP Customer Area <= 8.2.4 - Event Log Deletion via CSRFEPSS 0.2%CVE-2026-15247MEDIUMSearch Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/DeletionEPSS 0.2%CVE-2026-80342MEDIUMPayment Plugins for PayPal WooCommerce < 2.0.27 - Unauthenticated Payment Hijacking via Unvalidated PayPal Order IDEPSS 0.2%CVE-2025-12573MEDIUMBookingor <= 1.0.12 - Subscriber+ Category DeletionEPSS 0.2%CVE-2025-12820MEDIUMPure WC Variation Swatches <= 1.1.7 - Unauthenticated Settings UpdateEPSS 0.2%CVE-2023-6625MEDIUMProduct Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRFEPSS 0.2%CVE-2026-12865HIGHPhoto Gallery by 10Web < 1.8.44 - Reflected XSS via title and paged ParametersEPSS 0.2%CVE-2024-8091MEDIUMEnhanced Search Box <= 0.6.1 - Settings Update via CSRFEPSS 0.2%CVE-2024-3076LOWMM-email2image <= 0.2.5 - Stored XSS via CSRFEPSS 0.2%CVE-2025-8280MEDIUMContact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']EPSS 0.2%CVE-2026-78371MEDIUMFile Uploads Addon for WooCommerce 1.7.2 - 1.7.5 - Unauthenticated Customer Uploaded File DisclosureEPSS 0.2%CVE-2026-87848LOWMPCX Lightbox 1.2.2 - 1.2.5 - Unauthenticated Non-Public Post Content DisclosureEPSS 0.2%CVE-2024-7820MEDIUMILC Thickbox <= 1.0 - Settings update via CSRFEPSS 0.2%CVE-2024-7690MEDIUMDN Popup <= 1.2.2 - Settings Update via CSRFEPSS 0.2%CVE-2024-7862MEDIUMBlog Introduction <= 0.3.0 - Settings Update via CSRFEPSS 0.2%CVE-2024-0756LOWInsert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe InjectionEPSS 0.2%CVE-2026-12586HIGHLenxel WP <= 1.0.31 - Unauthenticated Account Takeover via Arbitrary Password ResetEPSS 0.2%