Vulnerabilidades en Unknown
5615 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-104667MEDIUMAnimated Number Counters < 3.1 - Editor+ Second-Order SQLi via Counter OrderEPSS —CVE-2026-96530MEDIUMOptimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard WidgetEPSS —CVE-2026-104049MEDIUMAcademy LMS < 4.0.0 - Subscriber+ Arbitrary Lesson Content Disclosure via Topic REST EndpointEPSS —CVE-2026-105316HIGHMagee Shortcodes <= 2.1.1 - Reflected XSS via live_preview and magee_create_shortcode ActionsEPSS —CVE-2026-97188HIGHString Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database EditorEPSS —CVE-2026-103323MEDIUMIntegration for Epos Now and WooCommerce 4.6.0 - 4.11.1 - Unauthenticated Action Scheduler Queue DisclosureEPSS —CVE-2026-104050MEDIUMAcademy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answersEPSS —CVE-2026-104653MEDIUMEnvira Gallery < 1.16.1 - Author+ Stored XSS via Gallery Crop DimensionsEPSS —CVE-2026-82211HIGHNexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key DisclosureEPSS —CVE-2026-104677HIGHWP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHPEPSS —CVE-2026-103378MEDIUMGeliver Akıllı Kargo Pazaryeri 3.0.0 - 3.1.0 - Unauthenticated API Key Disclosure via Public Log FileEPSS —CVE-2026-104651MEDIUMYaad Sarig Payment Gateway For WC < 2.2.13 - Subscriber+ Arbitrary Order Payment Manipulation via IDOREPSS —CVE-2026-97331MEDIUMUser Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_accessEPSS —CVE-2026-104678LOWCP Media Player < 1.3.4 - Contributor+ Media Player Settings UpdateEPSS —CVE-2026-87782HIGHKoinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to AdministratorEPSS —