Vulnerabilidades en unknown
4771 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2022-2240—Request a Quote <= 2.3.7 - CSV InjectionEPSS 1.4%CVE-2021-24167—Web-Stat < 1.4.1 - API Key DisclosureEPSS 1.4%CVE-2022-2926MEDIUMDownload Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path TraversalEPSS 1.4%CVE-2022-2268—WP All Import < 3.6.8 - Admin+ Arbitrary File UploadEPSS 1.4%CVE-2021-24934—Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site ScriptingEPSS 1.4%CVE-2022-0385—Crazy Bone <= 0.6.0 - Unauthenticated Stored XSSEPSS 1.4%CVE-2022-1239—HubSpot < 8.8.15 - Contributor+ Blind SSRFEPSS 1.4%CVE-2021-24807—Support Board < 3.3.5 - Agent+ Stored Cross-Site ScriptingEPSS 1.4%CVE-2021-25104—Ocean Extra < 1.9.5 - Reflected Cross-Site ScriptingEPSS 1.4%CVE-2021-24241—Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)EPSS 1.4%CVE-2026-2025HIGHMail Mint < 1.19.5 - Unauthenticated Emails DisclosureEPSS 1.4%CVE-2022-1910—Shortcodes and extra features for Phlox theme < 2.9.8 - Reflected Cross-Site-ScriptingEPSS 1.4%CVE-2021-24447—WP Image Zoom < 1.47 - Local File InclusionEPSS 1.4%CVE-2025-2907CRITICALOrder Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option UpdateEPSS 1.4%CVE-2021-24754—MainWP Child Reports < 2.0.8 - Admin+ SQL InjectionEPSS 1.4%CVE-2023-6528HIGHSlider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCEEPSS 1.4%CVE-2022-2357—WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File DownloadEPSS 1.4%CVE-2022-3394HIGHWP All Export Pro < 1.7.9 - Authenticated Code InjectionEPSS 1.4%CVE-2021-24506—Slider Hero < 8.2.7 - Contributor+ SQL InjectionEPSS 1.4%CVE-2021-24580—Side Menu Lite < 2.2.6 - Authenticated SQL InjectionEPSS 1.4%