Vulnerabilidades en Unknown
5484 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-2635—Autoptimize < 3.1.1 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2026-15049HIGHDepicter < 4.8.0 - Editor+ Arbitrary File Upload via ZIP ImportEPSS 0.6%CVE-2024-8855CRITICALWordPress Auction <= 3.7 - Editor+ SQL InjectionEPSS 0.6%CVE-2022-2563MEDIUMTutor LMS < 2.0.10 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24803—Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRFEPSS 0.6%CVE-2022-2190MEDIUMEnvira Gallery Lite < 1.8.4.7 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-24168—Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2022-0499—Sermon Browser <= 0.45.22 - Arbitrary File Upload via CSRFEPSS 0.6%CVE-2021-24211—WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2023-0378MEDIUMGreenshift < 5.0 - Contributor+ Stored XSSEPSS 0.6%CVE-2022-4764MEDIUMSimple File Downloader <= 1.0.4 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-4793MEDIUMBlog Designer – Post and Widget < 2.4.1 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-4761MEDIUMPost Views Count <= 3.0.2 - Contributor+ Stored XSS in ShortcodeEPSS 0.6%CVE-2023-3131—MStore API < 3.9.7 - Subscriber+ Unauthorized Settings UpdateEPSS 0.6%CVE-2021-24425—myStickymenu < 2.5.2 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24332—Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24426—Backup by 10Web <= 1.0.20 - Reflected Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24419—WP YouTube Lyte < 1.7.16 - Authenticated Stored XSSEPSS 0.6%CVE-2026-75800CRITICALFrontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponseEPSS 0.6%CVE-2026-77001CRITICALSocial Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication BypassEPSS 0.6%