Vulnerabilidades en Unknown
5465 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-1436—WPCargo Track & Trace < 6.9.5 - Reflected Cross Site ScriptingEPSS 0.8%CVE-2022-1673—WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout pageEPSS 0.8%CVE-2022-1216—Advanced Image Sitemap <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1582—External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-1268—Donate Extra <= 2.02 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1009—Smush < 3.9.9 - Admin+ Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0626—Advanced Admin Search < 1.1.6 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1218—Domain Replace <= 1.3.8 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1455—Call Now Button < 1.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1217—Custom TinyMCE Shortcode Button <= 1.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1547—Check & Log email < 1.0.6 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1425—WPQA < 5.2 - Subscriber+ Private Message Disclosure via IDOREPSS 0.8%CVE-2023-3279MEDIUMNextGEN Gallery < 3.39 - Admin+ Local File InclusionEPSS 0.8%CVE-2023-0279HIGHMedia Library Assistant < 3.06 - Admin+ SQLiEPSS 0.8%CVE-2023-1427MEDIUMPhoto Gallery by 10Web < 1.8.15 - Admin+ Path TraversalEPSS 0.8%CVE-2021-24859—User Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata AccessEPSS 0.8%CVE-2021-24733—WP Post Page Clone < 1.2 - Unauthorised Post AccessEPSS 0.8%CVE-2021-24819—Page/Post Content Shortcode <= 1.0 - Contributor+ Arbitrary Posts/Pages AccessEPSS 0.8%CVE-2021-24873—Tutor LMS < 1.9.11 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24908—Check & Log Email < 1.0.4 - Reflected Cross-Site ScriptingEPSS 0.8%