Vulnerabilidades en Unknown
5484 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2021-24263—PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24267—All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24261—HT Mega - Absolute Addons for Elementor Page Builder < 1.5.7 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24260—Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSSEPSS 0.7%CVE-2022-2351—Post SMTP < 2.1.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-3135MEDIUMSEO Smart Links <= 3.0.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-2737—WP STAGING < 2.9.18 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-2887—WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-1663—Stop Spam Comments <= 0.2.1.2 - Access Token BypassEPSS 0.7%CVE-2022-2799—Affiliates Manager < 2.9.14 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24126—Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-0706—Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2024-5080HIGHWP eMember < 10.6.6 - Admin+ Arbitrary File UploadEPSS 0.7%CVE-2023-5355HIGHAwesome Support < 6.1.5 - Submitter+ Arbitrary File DeletionEPSS 0.7%CVE-2022-3690MEDIUMPopup Maker < 1.16.11 - Contributor+ Stored Cross Site ScriptingEPSS 0.7%CVE-2023-5133HIGHUser Activity Log Pro < 2.3.4 - IP SpoofingEPSS 0.7%CVE-2021-24334—Instant Images WordPress Plugin < 4.4.0.1 - Authenticated Stored XSS & XFSEPSS 0.7%CVE-2021-24129—Themify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-4550HIGHUser Activity <= 1.0.1 - IP SpoofingEPSS 0.7%CVE-2022-2115—Popup Anything < 2.1.7 - Reflected Cross-Site ScriptingEPSS 0.7%