Vulnerabilidades en Unknown
5615 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-13580MEDIUMXV Random Quotes <= 1.40 - Settings Reset via CSRFEPSS 0.2%CVE-2024-12709MEDIUMBulk Me Now <= 2.0 - Message Deletion via CSRFEPSS 0.2%CVE-2026-18234MEDIUMMStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via WalletEPSS 0.2%CVE-2024-11719MEDIUMtarteaucitron.js for WordPress < 0.3.0 - Stored XSS via CSRFEPSS 0.2%CVE-2026-18233MEDIUMMStore API < 4.21.1 - Subscriber+ Arbitrary Order CompletionEPSS 0.2%CVE-2024-11141MEDIUMSailthru Triggermail < 1.1 - Subscriber+ Stored XSSEPSS 0.2%CVE-2025-1362MEDIUMeasy-broken-link-checker <= 9.0.2 - Bulk Actions via CSRFEPSS 0.2%CVE-2025-1798MEDIUMDesign Comuni Italia < 1.1.2 - Unauthenticated Stored XSSEPSS 0.2%CVE-2025-15694LOWJoli Table Of Contents 2.0.0 - 2.8.0 - Admin+ Stored XSSEPSS 0.2%CVE-2026-93661LOWEvents Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOREPSS 0.2%CVE-2026-84150MEDIUMDirectorist < 8.9.5 - Subscriber+ Cross-User Favorites Read and Write via REST Favorites EndpointEPSS 0.2%CVE-2025-15692LOWIcegram Express < 5.8.6 - Admin+ Stored XSSEPSS 0.2%CVE-2026-94297LOWMedia Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term CreationEPSS 0.2%CVE-2026-87860MEDIUMSubscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRFEPSS 0.2%CVE-2026-91072MEDIUMEWWW Image Optimizer < 8.8.0 - Admin+ WebP File Rename and Deletion via Unrestricted Path in WebP Migration HandlerEPSS 0.2%CVE-2026-96525LOWMCP Server for WordPress < 1.8.2 - Contributor+ Workflow Modification and Deletion via Missing Ownership CheckEPSS 0.2%CVE-2026-81432MEDIUMJetStyleManager < 1.3.9 - Skin Deletion and Modification via CSRFEPSS 0.2%CVE-2026-81426MEDIUMWC Vendors < 2.7.2.1 - Order Shipment Status Change via CSRFEPSS 0.2%CVE-2025-1762MEDIUMEvent Tickets with Ticket Scanner < 2.5.4 - Arbitrary Tickets Deletion via CSRFEPSS 0.2%CVE-2026-88828MEDIUMBlacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application PasswordsEPSS 0.2%