Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-3128—Donation Thermometer < 2.1.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2628—DSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1549—WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-1964—Easy SVG Support < 3.3.0 - Author+ Stored Cross Site Scripting via SVGEPSS 0.6%CVE-2022-2184—CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRFEPSS 0.6%CVE-2022-1562—Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVGEPSS 0.6%CVE-2022-1776—Icegram < 2.1.8 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0898—IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-13347MEDIUMEssential WP Real Estate <= 1.1.3 - Reflected XSSEPSS 0.6%CVE-2022-1506—WP Born Babies <= 1.0 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2025-4954HIGHAxle Demo Importer <= 1.0.3 - Author+ Arbitrary File UploadEPSS 0.6%CVE-2024-13226MEDIUMA5 Custom Login Page <= 2.8.1 - Reflected XSSEPSS 0.6%CVE-2024-13221MEDIUMFantastic Elasticsearch <= 4.1.0 - Reflected XSSEPSS 0.6%CVE-2024-13224MEDIUMSlideDeck 1 Lite Content Slider <= 1.4.8 - Reflected XSSEPSS 0.6%CVE-2026-16062MEDIUMEvent Booking Manager for WooCommerce < 5.3.7 - Contributor+ PHP Object Injection via Event Timeline and FAQ ContentEPSS 0.6%CVE-2024-13225MEDIUMECT Home Page Products <= 1.9 - Reflected XSSEPSS 0.6%CVE-2024-13112MEDIUMWP MediaTagger <= 4.1.1 - Reflected XSSEPSS 0.6%CVE-2022-4239MEDIUMWorkreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOREPSS 0.6%CVE-2021-24159—Contact Form 7 Style <= 3.1.9 - Cross-Site Request Forgery to Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-11372HIGHConnexion Logs <= 3.0.2 - Admin+ SQL InjectionEPSS 0.6%