Vulnerabilidades en Unknown

5444 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2023-0336MEDIUMOoohBoi Steroids for Elementor < 2.1.5 - Subscriber+ Attachment DeletionEPSS 1.0%CVE-2023-0335MEDIUMWP Shamsi <= 4.3.3 - Subscriber+ Attachment DeletionEPSS 1.0%CVE-2022-25810—Transposh WordPress Translation <= 1.0.8 - Subscriber+ Unauthorised CallsEPSS 1.0%CVE-2022-3858HIGHChaty < 3.0.3 - Admin+ SQLiEPSS 1.0%CVE-2022-3578MEDIUMProfileGrid < 5.1.1 - Reflected Cross-Site ScriptingEPSS 1.0%CVE-2023-1780—Companion Sitemap Generator < 4.5.3 - Reflected XSSEPSS 1.0%CVE-2021-24366MEDIUMAdmin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in LabelEPSS 1.0%CVE-2022-1202—WP-CRM <= 1.2.1 - CSV InjectionEPSS 1.0%CVE-2022-4357CRITICALLetsRecover < 1.2.0 - Unauthenticated SQLiEPSS 1.0%CVE-2021-24872—Get Custom Field Values < 4.0 - Contributors+ Arbitrary Post Metadata AccessEPSS 1.0%CVE-2021-24845—Improved Include Page <= 1.2 - Contributor+ Arbitrary Posts/Pages AccessEPSS 1.0%CVE-2022-1559—Clipr <= 1.2.3 - Admin+ Stored Cross-Site ScriptingEPSS 1.0%CVE-2022-1558—Curtain <= 1.0.2 - Admin+ Stored Cross-Site ScriptingEPSS 1.0%CVE-2022-1203—Content Mask < 1.8.4.1 - Subscriber+ Arbitrary Options UpdateEPSS 1.0%CVE-2025-5397CRITICALJobmonster - Job Board WordPress Theme <= 4.8.1 - Authentication BypassEPSS 1.0%CVE-2022-1685—Five Minute Webshop <= 1.3.2 - Admin+ SQLi via orderbyEPSS 1.0%CVE-2022-1691—Realty Workstation < 1.0.15 - Agent SQLiEPSS 1.0%CVE-2022-0163—Smart Forms < 2.6.71 - Subscriber+ Form Data DownloadEPSS 1.0%CVE-2022-3762MEDIUMBooster for WooCommerce - ShopManager+ Arbitrary File DownloadEPSS 1.0%CVE-2023-4311—Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCEEPSS 1.0%