Vulnerabilidades en Unknown
5484 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2023-4297MEDIUMMmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory ListingEPSS 0.6%CVE-2026-15215HIGHSubscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin InstallationEPSS 0.6%CVE-2023-7247MEDIUMLogin as User or Customer <= 3.8 - Admin Account TakeoverEPSS 0.6%CVE-2023-0075MEDIUMAmazon JS <= 0.10 - Contributor+ Stored XSSEPSS 0.6%CVE-2024-2505HIGHGamiPress < 6.8.9 - Broken Access ControlEPSS 0.6%CVE-2022-2239—Request a Quote < 2.3.9 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24635—Visual Link Preview < 2.2.3 - Unauthorised AJAX CallsEPSS 0.6%CVE-2023-0061MEDIUMJudge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSSEPSS 0.6%CVE-2023-2029—PrePost SEO <= 3.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24421—WP JobSearch < 1.7.4 - Authenticated Stored XSSEPSS 0.6%CVE-2023-0428HIGHWatu Quiz < 3.3.8.2 - Reflected XSSEPSS 0.6%CVE-2021-24187—SEO Redirection < 6.4 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24804—Simple JWT Login < 3.2.1 - Arbitrary Settings Update to Site Takeover via CSRFEPSS 0.6%CVE-2022-2241—Featured Image from URL < 4.0.0 - Arbitrary Settings Update to Stored XSS via CSRFEPSS 0.6%CVE-2021-24180—Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24620—Simple eCommerce <= 2.2.5 - Arbitrary File UploadEPSS 0.6%CVE-2024-2101MEDIUMWordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24696—Simple Download Monitor < 3.9.9 - Multiple CSRFEPSS 0.6%CVE-2024-10152HIGHSimple Certain Time to Show Content < 1.3.1 - Reflected XSSEPSS 0.6%CVE-2021-24424—WP Reset < 1.90 - Authenticated Stored XSSEPSS 0.6%