Vulnerabilidades en Unknown
5444 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-2354—WP-DBManager < 2.80.8 - Admin+ Remote Command ExecutionEPSS 1.3%CVE-2024-11605MEDIUMWP Publications <= 1.2 - Admin+ Stored XSSEPSS 1.3%CVE-2022-0535—E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)EPSS 1.3%CVE-2021-24143—AccessPress Social Icons < 1.8.1 - Authenticated SQL InjectionEPSS 1.3%CVE-2022-1472—Better Find and Replace < 1.3.6 - Admin+ SQLiEPSS 1.3%CVE-2024-0250MEDIUMAnalytics Insights for Google Analytics 4 < 6.3 - Open RedirectEPSS 1.3%CVE-2023-5952—Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object InjectionEPSS 1.3%CVE-2021-24181—Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correctEPSS 1.3%CVE-2021-24186—Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_idEPSS 1.3%CVE-2021-24185—Tutor LMS < 1.7.7 - SQL Injection via tutor_place_ratingEPSS 1.3%CVE-2021-24677—Find My Blocks < 3.4.0 - Private Post Titles DisclosureEPSS 1.3%CVE-2024-6846MEDIUMSmartSearchWP <= 2.4.4 - Unauthenticated Log PurgeEPSS 1.3%CVE-2022-0403—Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/DeletionEPSS 1.3%CVE-2021-24501—Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax ActionsEPSS 1.3%CVE-2020-36503—Connections Business Directory < 9.7 - Admin+ CSV InjectionEPSS 1.2%CVE-2023-5340—Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object InjectionEPSS 1.2%CVE-2021-24144—Contact Form 7 Database Addon < 1.2.5.6 - CSV InjectionEPSS 1.2%CVE-2023-1119MEDIUMMultiple Plugins - Cross-Site Scripting From Third-party LibraryEPSS 1.2%CVE-2022-3335HIGHKadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection InjectionEPSS 1.2%CVE-2022-1762—iQ Block Country < 1.2.20 - Protection Bypass due to IP SpoofingEPSS 1.2%