Vulnerabilidades en Unknown
5428 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-2552—Duplicator < 1.4.7.1 - Unauthenticated System Information DisclosureEPSS 11.3%CVE-2022-1392—Videos sync PDF <= 1.7.4 - Unauthenticated LFIEPSS 11.3%CVE-2021-24488—Post Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)EPSS 11.2%CVE-2021-24507—Astra Pro Addon < 3.5.2 - Unauthenticated SQL InjectionEPSS 11.0%CVE-2023-5674—WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpointEPSS 10.8%CVE-2022-0760—Simple Link Directory < 7.7.2 - Unauthenticated SQL injectionEPSS 10.8%CVE-2022-1692—CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLiEPSS 10.6%CVE-2022-0592—MapSVG < 6.2.20 - Unauthenticated SQLiEPSS 10.4%CVE-2021-24169—Advanced Order Export For WooCommerce < 3.1.8 - Reflected Cross-Site Scripting (XSS)EPSS 10.3%CVE-2022-0784—Title Experiments Free < 9.0.1 - Unauthenticated SQLiEPSS 10.1%CVE-2022-0948—Order Listener for WooCommerce < 3.2.2 - Unauthenticated SQLiEPSS 9.9%CVE-2021-24647—Pie Register < 3.7.1.6 - Unauthenticated Arbitrary LoginEPSS 9.8%CVE-2021-24215—Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege EscalationEPSS 9.7%CVE-2022-4063CRITICALInPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCEEPSS 9.5%CVE-2025-2594HIGHUser Registration & Membership < 4.1.3 - Authentication BypassEPSS 9.4%CVE-2022-0885—Member Hero <= 1.0.9 - Unauthenticated RCEEPSS 9.4%CVE-2022-0814—Ubigeo de Peru < 3.6.4 - Unauthenticated SQLiEPSS 9.4%CVE-2022-0827—Bestbooks <= 2.6.3 - Unauthenticated SQLiEPSS 9.1%CVE-2022-0826—WP Video Gallery <= 1.7.1 - Unauthenticated SQLiEPSS 9.1%CVE-2022-0785—Daily Prayer Time < 2022.03.01 - Unauthenticated SQLiEPSS 9.0%