Vulnerabilidades en Unknown
5371 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2021-24399—The Sorter <= 1.0 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-25087—Wordpress Download Manager < 3.2.25 - Sensitive Information DisclosureEPSS 1.5%CVE-2021-24602—HM Multiple Roles < 1.3 - Arbitrary Role ChangeEPSS 1.5%CVE-2022-0537—MapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code ExecutionEPSS 1.5%CVE-2021-24137—Blog2Social: Social Media Auto Post & Scheduler < 6.3.1 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-24149—Modern Events Calendar Lite < 5.16.6 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-25045—Asgaros Forum < 1.15.15 - Admin+ SQL Injection via forum_idEPSS 1.5%CVE-2021-24865—Advanced Custom Fields: Extended < 0.8.8.7 - Admin+ SQL InjectionEPSS 1.5%CVE-2026-19092CRITICALTutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable ShadowingEPSS 1.5%CVE-2021-24753—Rich Reviews by Starfish < 1.9.6 - Admin+ SQL InjectionEPSS 1.5%CVE-2021-24747—SEO Booster < 3.8 - Admin+ SQL InjectionEPSS 1.5%CVE-2026-12394CRITICALMemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to AdministratorEPSS 1.5%CVE-2021-24977—Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS AppendingEPSS 1.5%CVE-2021-24663—Simple School Staff Directory <= 1.1 - Admin+ Arbitrary File UploadEPSS 1.5%CVE-2021-24906—Protect WP Admin < 3.6.2 - Unauthenticated Plugin DeactivationEPSS 1.5%CVE-2021-25069—WordPress Download Manager < 3.2.34 - Authenticated SQL Injection to Reflected XSSEPSS 1.5%CVE-2020-35012—Events Manager < 5.9.8 - Admin+ SQL InjectionEPSS 1.5%CVE-2022-0420—RegistrationMagic < 5.0.2.2 - Admin+ SQL InjectionEPSS 1.5%CVE-2022-1023—Podcast Importer SecondLine < 1.3.8 - Admin+ SQLiEPSS 1.5%CVE-2022-1006—Advanced Booking Calendar < 1.7.1 - Admin+ SQLiEPSS 1.5%