Vulnerabilidades en Unknown

5484 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2022-4198MEDIUMWP Social Sharing <= 2.2 - Admin+ Stored XSSEPSS 0.6%CVE-2021-25060—Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSSEPSS 0.6%CVE-2022-1152—Menubar < 5.8 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-0423—3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0397—WPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-0200—Themify Portfolio Post < 1.1.7 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-25057—Translation Exchange <= 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2022-2391—Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24761—Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRFEPSS 0.6%CVE-2022-2371—YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0876—Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1156—Books & Papers <= 0.20210223 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24896—Caldera forms < 1.9.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1228—Opensea < 1.0.3 - Admin+ Stored XSSEPSS 0.6%CVE-2022-0388—Interactive Medical Drawing of Human Body < 2.6 - Admin+ Stored XSSEPSS 0.6%CVE-2021-24771—Inspirational Quote Rotator <= 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0840—Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add iconEPSS 0.6%CVE-2022-0728—Easy Smooth Scroll Links < 2.23.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25029—Cluevo < 1.8.1 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-0662—Adrotate < 5.8.23 - Admin+ XSS via Advert NameEPSS 0.6%