Vulnerabilidades en unknown
4771 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2024-0250MEDIUMAnalytics Insights for Google Analytics 4 < 6.3 - Open RedirectEPSS 1.3%CVE-2022-2269—Website File Changes Monitor < 1.8.3 - Admin+ SQLiEPSS 1.3%CVE-2021-24185—Tutor LMS < 1.7.7 - SQL Injection via tutor_place_ratingEPSS 1.3%CVE-2023-5952—Welcart e-Commerce < 2.9.5 - Unauthenticated PHP Object InjectionEPSS 1.3%CVE-2021-24181—Tutor LMS < 1.7.7 - SQL Injection via tutor_mark_answer_as_correctEPSS 1.3%CVE-2021-24186—Tutor LMS < 1.8.3 - SQL Injection via tutor_answering_quiz_question/get_answer_by_idEPSS 1.3%CVE-2024-6846MEDIUMSmartSearchWP <= 2.4.4 - Unauthenticated Log PurgeEPSS 1.3%CVE-2021-24677—Find My Blocks < 3.4.0 - Private Post Titles DisclosureEPSS 1.3%CVE-2021-24501—Workreap theme < 2.2.2 - Missing Authorization Checks in Ajax ActionsEPSS 1.3%CVE-2023-5340—Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object InjectionEPSS 1.2%CVE-2023-1119MEDIUMMultiple Plugins - Cross-Site Scripting From Third-party LibraryEPSS 1.2%CVE-2022-1472—Better Find and Replace < 1.3.6 - Admin+ SQLiEPSS 1.2%CVE-2021-24144—Contact Form 7 Database Addon < 1.2.5.6 - CSV InjectionEPSS 1.2%CVE-2021-24693—Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File ThumbnailEPSS 1.2%CVE-2021-24839—SupportCandy < 2.2.5 - Unauthenticated Arbitrary Ticket DeletionEPSS 1.2%CVE-2021-24142—301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL InjectionEPSS 1.2%CVE-2021-24877—MainWP Child < 4.1.8 - Admin+ SQL InjectionEPSS 1.2%CVE-2022-2354—WP-DBManager < 2.80.8 - Admin+ Remote Command ExecutionEPSS 1.2%CVE-2021-24304—Newsmag < 5.0 - Unauthenticated Reflected Cross-site Scripting (XSS)EPSS 1.2%CVE-2021-24994—WPvivid Backup and Migration Plugin < 0.9.69 - Unauthenticated Stored Cross-Site ScriptingEPSS 1.2%