Vulnerabilidades en Unknown
5444 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2021-25068—Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLiEPSS 1.3%CVE-2021-24777—Hotscot Contact Form < 1.3 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-1421—Discy < 5.2 - Settings Update via CSRFEPSS 1.3%CVE-2023-2712CRITICALMalicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.EPSS 1.3%CVE-2022-0190—Ad Invalid Click Protector (AICP) < 1.2.6 - Authenticated SQL InjectionEPSS 1.3%CVE-2022-3494HIGHComplianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLiEPSS 1.3%CVE-2021-25037—All In One SEO < 4.1.5.3 - Authenticated SQL InjectionEPSS 1.3%CVE-2023-3169MEDIUMtagDiv Composer < 4.2 - Unauthenticated Stored XSSEPSS 1.3%CVE-2022-2958—BadgeOS < 3.7.1.3 - Subscriber+ SQLiEPSS 1.3%CVE-2024-9926MEDIUMJetpack < 13.9.1 - Subscriber+ Arbitrary Feedback AccessEPSS 1.3%CVE-2022-2269—Website File Changes Monitor < 1.8.3 - Admin+ SQLiEPSS 1.3%CVE-2021-24693—Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File ThumbnailEPSS 1.3%CVE-2022-1800—Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24877—MainWP Child < 4.1.8 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24778—Tradetracker-Store < 4.6.60 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24861—Quotes Collection <= 2.5.2 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-0267—AdRotate < 5.8.22 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-4208—ExportFeed <= 2.0.1.0 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-1777—Filr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX CallsEPSS 1.3%CVE-2022-1051—WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fieldsEPSS 1.3%