Vulnerabilidades en Unknown
5615 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-15246MEDIUMRealHomes Memberships < 3.1.0 - Subscriber+ Membership Payment BypassEPSS 0.1%CVE-2026-13729MEDIUMPodlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRFEPSS 0.1%CVE-2026-104119LOWSimple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API CredentialsEPSS 0.1%CVE-2019-25474MEDIUMEasy MP3 Downloader 4.7.8.8 Denial of Service Buffer OverflowEPSS 0.1%CVE-2026-13414MEDIUMCMP - Coming Soon & Maintenance < 4.1.18 - Unauthenticated Maintenance Mode Disable via cmp_disable_comingsoon_ajaxEPSS 0.1%CVE-2026-84151LOWThe Post Grid < 7.9.5 - Contributor+ Stored HTML/iframe Injection via wp_kses_post Allow-List WideningEPSS 0.1%CVE-2026-80517LOWWP Ultimate CSV Importer 7.17 - 9.1 - Admin+ Stored XSS via ZIP Import SVG UploadEPSS 0.1%CVE-2026-16965MEDIUMSolace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_statusEPSS 0.1%CVE-2026-93549HIGHCoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication BypassEPSS 0.1%CVE-2025-15363MEDIUMGet Use APIs < 2.0.10 - Contributor+ Stored XSSEPSS 0.1%CVE-2026-76549MEDIUMUpdraftPlus < 1.26.7 - Backup Restoration via CSRFEPSS 0.1%CVE-2026-13156MEDIUMMailerSend - Official SMTP Integration < 1.0.8 - Settings Deletion and Plugin Deactivation via CSRFEPSS 0.1%CVE-2026-11866MEDIUMLatePoint < 5.6.3 - Multiple Privileged Actions via CSRFEPSS 0.1%CVE-2025-15695LOWGTranslate < 3.0.10 - Admin+ Stored XSSEPSS 0.1%CVE-2026-90972MEDIUMWP Fusion Lite < 3.48.0 - Subscriber+ User Email Disclosure and Cross-User CRM Data DeletionEPSS 0.1%CVE-2026-8151MEDIUMSimple Membership MailChimp Integration < 1.9.8 - API Key Update via CSRFEPSS 0.1%CVE-2026-13416LOWCMP - Coming Soon & Maintenance < 4.1.18 - Editor+ Stored XSS via niteoCS_socialmediaEPSS 0.1%CVE-2025-15611MEDIUMPopup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRFEPSS 0.1%CVE-2026-94299MEDIUMelegro Crypto Payment <= 1.0.1 - Unauthenticated Arbitrary Order Status Change via IPN CallbackEPSS 0.1%CVE-2025-12696MEDIUMHelloLeads CRM Form Shortcode <= 1.0 - Unauthenticated Settings ResetEPSS 0.1%