Vulnerabilidades en Unknown
5484 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2021-24793—WPeMatico RSS Feed Fetcher < 2.6.12 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24489—Request a Quote < 2.3.9 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24722—Restaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24736—Shared Files < 1.6.57 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24789—Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24740—Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24624—MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site ScriptingEPSS 0.6%CVE-2021-24715—WP Sitemap Page < 1.7.0 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-2763—WP Socializer < 7.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-4310MEDIUMSlimstat Analytics < 4.9.3 - Unauthenticated Stored XSSEPSS 0.6%CVE-2024-0365MEDIUMFancy Product Designer < 6.1.5 - Admin+ SQL InjectionEPSS 0.6%CVE-2022-0447—Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_typesEPSS 0.6%CVE-2021-25059MEDIUMDownload Plugin < 2.0.0 - Subscriber+ Website DownloadEPSS 0.6%CVE-2026-1540HIGHSpam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code ExecutionEPSS 0.6%CVE-2024-12274HIGHBookingPress < 1.1.23 - Unauthenticated Export File DownloadEPSS 0.6%CVE-2021-24487—St Daily Tip <= 4.7 - CSRF to Stored Cross-Site ScriptingEPSS 0.6%CVE-2026-82845CRITICALMasteriyo LMS < 3.4.1 - Subscriber+ PHP Object InjectionEPSS 0.6%CVE-2022-1755MEDIUMSVG Support < 2.5 - Author+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24516—PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25048—KingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%