Vulnerabilidades en Unknown

5484 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-2181—Advanced WordPress Reset < 1.6 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2022-2072—Name Directory < 1.25.3 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2021-24196—Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.7%CVE-2023-0467MEDIUMWP Dark Mode < 4.0.8 - Subscriber+ Local File InclusionEPSS 0.7%CVE-2024-3231MEDIUMPopup4Phone <= 1.3.2 - Unauthenticated Stored XSSEPSS 0.7%CVE-2022-3739MEDIUMWP Best Quiz <= 1.0 - Author+ Stored XSSEPSS 0.7%CVE-2022-2374—Simply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2024-0852HIGHcoreActivity < 1.8.1 - Unauthenticated Stored XSSEPSS 0.7%CVE-2023-5082HIGHHistory Log by click5 < 1.0.13 - Admin+ Time-Based Blind SQL InjectionEPSS 0.7%CVE-2021-24574—Simple Banner < 2.10.4 - Authenticated Stored XSSEPSS 0.7%CVE-2021-24594—Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24598—Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24616—AddToAny Share Buttons < 1.7.48 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24830—Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24608—Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24710—Print-O-Matic < 2.0.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-2040—Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URLEPSS 0.7%CVE-2021-24558—Project Status <= 1.6 - Reflected Cross-Site Scripting (XSS)EPSS 0.7%CVE-2021-24346—Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting (XSS)EPSS 0.7%CVE-2021-25061—WP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.7%