Vulnerabilidades en Unknown
5484 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2021-24328—WP Login Security and History <= 1.0 - CSRF to Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2023-3175—AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24423—UpdraftPlus < 1.16.59 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2567—Form Builder CP < 1.2.32 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24519—Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24480—Event Geek <= 2.5.2 - Stored Cross-site Scripting (XSS)EPSS 0.6%CVE-2024-10499HIGHAI-Engine < 2.6.5 - Admin+ SQLiEPSS 0.6%CVE-2021-24479—DrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24481—Any Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2023-0147MEDIUMFlexible Captcha <= 4.1 - Contributor+ Stored XSSEPSS 0.6%CVE-2021-24343—iFlyChat – WordPress Chat < 4.7.0 - Admin+ Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2026-9271MEDIUMKeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSSEPSS 0.6%CVE-2021-24448—Profile Builder < 3.4.8 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24879—SupportCandy < 2.2.7 - CSRF to Cross-Site ScriptingEPSS 0.6%CVE-2022-0770—Translate WordPress with GTranslate < 2.9.9 - CSRF to Account TakeoverEPSS 0.6%CVE-2022-2299—Allow SVG Files <= 1.1 - Author+ Stored Cross Site Scripting via SVGEPSS 0.6%CVE-2022-3930MEDIUMDirectorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOREPSS 0.6%CVE-2025-66571CRITICALUNA CMS 9.0.0-RC1 - 14.0.0-RC4 PHP Object InjectionEPSS 0.6%CVE-2021-25010—Post Snippets < 3.1.4 - CSRF to Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25046—Modern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSSEPSS 0.6%