Vulnerabilidades en Unknown
5484 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2020-36504—WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRFEPSS 0.7%CVE-2022-4340MEDIUMBookingPress < 1.0.31 - Unauthenticated IDOR in appointment_idEPSS 0.7%CVE-2022-3070MEDIUMGenerate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24502—WP Google Map < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2021-24856—Shared Files < 1.6.61 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-1990—Nested Pages < 3.1.21 - Admin+ Stored Cross Site ScriptingEPSS 0.7%CVE-2022-1334—WP YouTube Live < 1.8.3 - Admin+ Stored Cross Site ScriptingEPSS 0.7%CVE-2022-4657MEDIUMRestaurant Menu < 2.3.6 - Contributor+ Stored XSS via ShortcodeEPSS 0.7%CVE-2022-1566—Quotes llama < 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-1010—Login using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-2537—WooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2022-2538—WP Hide & Security Enhancer < 1.8 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2024-2761MEDIUMGenesis Blocks < 3.1.3 - Contributor+ Stored XSSEPSS 0.7%CVE-2026-74851HIGHPods < 3.3.9.1 - Author+ RCE via Shortcode Display CallbackEPSS 0.7%CVE-2023-6077—Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post AccessEPSS 0.7%CVE-2023-2117LOWImage Optimizer by 10web < 1.0.27 - Admin+ Path TraversalEPSS 0.7%CVE-2023-4216LOWOrders Tracking for WooCommerce < 1.2.6 - Admin+ Arbitrary File Access/ReadEPSS 0.7%CVE-2026-19221HIGHForminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on MultisiteEPSS 0.7%CVE-2026-13392HIGHElementsKit Lite < 3.10.01 - Subsite Administrator+ PHP Code Injection via Custom Widget Builder (Multisite)EPSS 0.7%CVE-2022-2912MEDIUMCraw Data <= 1.0.0 - Server Side Request ForgeryEPSS 0.7%