Vulnerabilidades en Unknown

5492 resultados
Análisis Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2021-24782—Flex Local Fonts <= 1.0.0 - Admin+ Stored Cross-Site-ScriptingEPSS 0.6%CVE-2022-1156—Books & Papers <= 0.20210223 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24903—GRAND FlaGallery <= 6.1.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24972—Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24718—ARForms Form Builder < 1.5 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24944—Custom Dashboard & Login Page < 7.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25029—Cluevo < 1.8.1 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-2424—Google Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2152—Duplicate Page and Post Plugin < 2.8 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2426—Thinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2425—WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2423—DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2410—mTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-2395—weForms < 1.6.14 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2411—Auto More Tag <= 4.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2412—Better Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2409—Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2384—Digital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2398—WP Comments Fields < 4.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2372—YaySMTP < 2.2.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%