Vulnerabilidades en Unknown

5465 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-1068HIGH404 Solution < 2.35.8 - Admin+ SQL InjectionEPSS 0.8%CVE-2023-5949—SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post DisclosureEPSS 0.8%CVE-2023-2623—KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information DisclosureEPSS 0.8%CVE-2022-2341—Simple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2024-9422MEDIUMGEO My WordPress < 4.5 - Admin+ Arbitrary File UploadEPSS 0.8%CVE-2022-2340—W-DALIL <= 2.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-1772—Google Places Review < 2.0.0 - Admin+ Stored Cross Site ScriptingEPSS 0.8%CVE-2021-25103—GTranslate < 2.9.7 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25102—All In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-2111MEDIUMHollerBox < 2.1.4 - Admin+ SQL InjectionEPSS 0.8%CVE-2021-24205—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Icon Box WidgetEPSS 0.8%CVE-2022-3912HIGHUser Registration < 2.2.4.1 - Subscriber+ Arbitrary File UploadEPSS 0.8%CVE-2021-24147—Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2021-24455—Tutor LMS < 1.9.2 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2024-3822MEDIUMBase64 Encoder/Decoder <= 0.9.2 - Reflected XSSEPSS 0.7%CVE-2021-24203—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Divider WidgetEPSS 0.7%CVE-2021-24201—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Column ElementEPSS 0.7%CVE-2021-24202—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Heading WidgetEPSS 0.7%CVE-2021-24206—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Image Box WidgetEPSS 0.7%CVE-2021-24204—Elementor < 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) in Accordion WidgetEPSS 0.7%