Vulnerabilidades en Unknown

5444 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2021-24692—Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path TraversalEPSS 1.4%CVE-2021-24575—WPSchoolPress < 2.1.10 - Multiple Authenticated SQL InjectionsEPSS 1.4%CVE-2021-24847—SEO Redirection < 8.2 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24829—Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24755—myCred < 2.3 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2021-24748—Email Before Download < 6.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2022-2170—Microsoft Advertising Universal Event Tracking < 1.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 1.4%CVE-2021-25030—Events Made Easy < 2.2.36 - Subscriber+ SQL InjectionEPSS 1.4%CVE-2022-2168—Download Manager < 3.2.44 - Reflected Cross-Site ScriptingEPSS 1.4%CVE-2022-4061HIGHJobBoardWP < 1.2.2 - Unauthenticated Arbitrary File UploadEPSS 1.4%CVE-2026-12898MEDIUMAll-in-One WP Migration and Backup < 7.106 - Unauthenticated Arbitrary-Location Log File Write via Path TraversalEPSS 1.4%CVE-2023-0236MEDIUMTutor LMS < 2.0.10 - Reflected Cross-Site ScriptingEPSS 1.3%CVE-2021-24957—Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injectionEPSS 1.3%CVE-2021-24497—Giveaway <= 1.2.2 - Authenticated SQL InjectionEPSS 1.3%CVE-2021-24556—Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)EPSS 1.3%CVE-2022-2352HIGHPost SMTP < 2.1.7 - Admin+ Blind SSRFEPSS 1.3%CVE-2021-24508—Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSSEPSS 1.3%CVE-2021-24662—Game Server Status <= 1.0 - Admin+ SQL InjectionEPSS 1.3%CVE-2023-2252LOWDirectorist < 7.5.4 - Admin+ LFIEPSS 1.3%CVE-2022-3904MEDIUMMonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google AnalyticsEPSS 1.3%