Vulnerabilidades en Unknown

5492 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2021-24782—Flex Local Fonts <= 1.0.0 - Admin+ Stored Cross-Site-ScriptingEPSS 0.6%CVE-2022-0728—Easy Smooth Scroll Links < 2.23.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24992—Buttonizer - Smart Floating Action Button < 2.5.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0590—BulletProof Security < 5.8 - Admin+ Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24230—Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User MetaEPSS 0.6%CVE-2022-1027—Page Restriction WordPress < 1.2.7 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1090—Good & Bad Comments <= 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24898—EditableTable <= 0.1.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1228—Opensea < 1.0.3 - Admin+ Stored XSSEPSS 0.6%CVE-2021-25029—Cluevo < 1.8.1 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-0211—Shield Security < 13.0.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1088—Page Security & Membership <= 1.5.15 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24995—HTML5 Responsive FAQ <= 2.8.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0388—Interactive Medical Drawing of Human Body < 2.6 - Admin+ Stored XSSEPSS 0.6%CVE-2021-25105—Ivory Search < 5.4.1 - Multiple Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1046—Visual Form Builder < 3.0.7 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25101—Anti-Malware Security and Brute-Force Firewall < 4.20.94 - Admin+ Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-0389—WP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24714—WP All Import < 3.6.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0649—Adrotate < 5.8.23 - Admin+ XSS via Group NameEPSS 0.6%