Vulnerabilidades en Unknown
5450 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-0321—WP Voting Contest < 3.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1688—Note Press <= 0.1.10 - Admin+ SQLi via idEPSS 0.8%CVE-2023-1426MEDIUMWP Tiles <= 1.1.2 - Subscriber+ Draft/Private Post Title DisclosureEPSS 0.8%CVE-2022-1690—Note Press <= 0.1.10 - Admin+ SQLi via Bulk ActionsEPSS 0.8%CVE-2022-1686—Five Minute Webshop <= 1.3.2 - Admin+ SQLi via idEPSS 0.8%CVE-2022-0327—Master Addons for Elementor < 1.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1684—Cube Slider <= 1.2 - Admin+ SQLiEPSS 0.8%CVE-2021-24938—WooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24824—Custom Content Shortcode < 4.0.1 - Unauthorised Arbitrary Post Metadata AccessEPSS 0.8%CVE-2022-2080—Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOREPSS 0.8%CVE-2021-24781—Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value ChangeEPSS 0.8%CVE-2022-3846HIGHWorkreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOREPSS 0.8%CVE-2022-1773—WP Athletics <= 1.1.7 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1217—Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1241—Ask Me < 6.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1673—WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout pageEPSS 0.8%CVE-2022-1593—Site Offline or Coming Soon <= 1.6.6 - Stored Cross-Site Scripting via CSRFEPSS 0.8%CVE-2022-1216—Advanced Image Sitemap <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1528—VikBooking < 1.5.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1470—Ultimate WooCommerce CSV Importer <= 2.0 - Reflected Cross-Site ScriptingEPSS 0.8%