Vulnerabilidades en Unknown
5615 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-89000MEDIUMWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign RunEPSS 0.2%CVE-2025-1382MEDIUMContact Us By Lord Linus <= 2.6 - Admin+ Stored XSS via CSRFEPSS 0.2%CVE-2026-89003MEDIUMWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ SSRF via Campaign PreviewEPSS 0.2%CVE-2026-88791LOWSafe Redirect Manager < 2.3.0 - Open Redirect via Wildcard Redirect RulesEPSS 0.2%CVE-2026-80518LOWWP Ultimate CSV Importer < 9.2 - Unauthenticated Imported Data Disclosure via Predictable Log PathEPSS 0.2%CVE-2026-80338MEDIUMCMB2 < 2.13.0 - Subscriber+ Arbitrary Option Corruption via oEmbed HandlerEPSS 0.2%CVE-2026-86834LOWMetForm 2.2.1 - 4.3.0 - Unauthenticated Debug File Disclosure via HubSpot Forms IntegrationEPSS 0.2%CVE-2025-9703MEDIUMUltimate Addons for Elementor Lite < 2.5.0 - Author+ Stored XSSEPSS 0.2%CVE-2025-12061HIGHTax Service Electronic HDM < 1.2.1 - Unauthenticated Arbitrary SQL ExecutionEPSS 0.2%CVE-2024-8090MEDIUMJavaScript Logic <= 0.1 - CSRF to Stored XSSEPSS 0.2%CVE-2026-93662MEDIUMEvents Manager 7.4.1 - 7.4.4 - Subscriber+ Unpublished Event and Location Disclosure via 'owner' ParameterEPSS 0.2%CVE-2024-9711MEDIUMEKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRFEPSS 0.2%CVE-2026-82850MEDIUMMasteriyo LMS < 3.4.2 - Subscriber+ Quiz Answer Key DisclosureEPSS 0.2%CVE-2026-86602MEDIUMWP Recipe Maker 10.3.0 - 10.8.1 - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_previewEPSS 0.2%CVE-2026-90953MEDIUMImage Optimizer by Elementor < 1.7.7 - Subscriber+ Attachment Metadata and Site Statistics Disclosure via Discarded REST Permission CallbacksEPSS 0.2%CVE-2023-2334MEDIUMEasy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRFEPSS 0.2%CVE-2026-86603MEDIUMWP Recipe Maker < 10.8.2 - Subscriber+ Non-Public List Title Disclosure via wprm_search_listsEPSS 0.2%CVE-2024-9709MEDIUMEKC Tournament Manager < 2.2.2 - Create Tournaments/Teams via CSRFEPSS 0.2%CVE-2026-16557MEDIUMNimble Builder <= 3.3.8 - Subscriber+ Non-Public Content Disclosure via sek_get_nimble_content_for_seo_pluginsEPSS 0.2%CVE-2025-5921MEDIUMSureForms < 1.7.2 - Reflected XSSEPSS 0.2%