Vulnerabilidades en unknown
4771 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2022-2170—Microsoft Advertising Universal Event Tracking < 1.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 1.3%CVE-2022-1182—Visual Slide Box Builder <= 3.2.9 - Subscriber+ SQLiEPSS 1.3%CVE-2021-24957—Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injectionEPSS 1.3%CVE-2022-0899—Header Footer Code Manager < 1.1.24 - Reflected Cross-Site ScriptingEPSS 1.3%CVE-2021-24756—WP System Log < 1.0.21 - Unauthenticated Stored Cross-Site ScriptingEPSS 1.3%CVE-2021-24689—Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File ReadEPSS 1.3%CVE-2021-24846—Ni WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-24575—WPSchoolPress < 2.1.10 - Multiple Authenticated SQL InjectionsEPSS 1.3%CVE-2022-3574CRITICALWPForms Pro < 1.7.7 - CSV InjectionEPSS 1.3%CVE-2021-24829—Visitor Traffic Real Time Statistics < 3.9 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-24952—Conversios.io < 4.6.2 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-24847—SEO Redirection < 8.2 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2022-22735—Simple Quotation <= 1.3.2 - Subscriber+ SQL injectionEPSS 1.3%CVE-2021-24748—Email Before Download < 6.8 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-0410—WP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-24848—Mediamatic < 2.8.1 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-25054—WPcalc <= 2.1 - Authenticated SQL InjectionEPSS 1.3%CVE-2021-24755—myCred < 2.3 - Subscriber+ SQL InjectionEPSS 1.3%CVE-2021-24566HIGHWooCommerce Currency Switcher < 1.3.7 - Authenticated (Low Privilege) Local File InclusionEPSS 1.3%CVE-2022-2557—WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and DeletionEPSS 1.3%