Vulnerabilidades en unknown
4777 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2022-4153MEDIUMContest Gallery < 19.1.5.1 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4159MEDIUMContest Gallery < 19.1.5.1 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4162MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4166MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4161MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4164MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4163MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4150MEDIUMContest Gallery < 19.1.5 - Author+ SQL InjectionEPSS 0.9%CVE-2022-4151MEDIUMContest Gallery < 19.1.5 - Admin+ SQL InjectionEPSS 0.9%CVE-2023-6035—EazyDocs < 2.3.4 - Subscriber + SQLiEPSS 0.9%CVE-2022-1169—Careerfy < 3.9.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)EPSS 0.9%CVE-2022-0818—Coupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSSEPSS 0.9%CVE-2022-4154MEDIUMContest Gallery Pro < 19.1.5 - Admin+ SQL InjectionEPSS 0.9%CVE-2022-0680—Plezi < 1.0.3 - Unauthenticated Stored XSSEPSS 0.9%CVE-2022-0780—SearchIQ < 3.9 - Unauthenticated Stored XSSEPSS 0.9%CVE-2022-4260MEDIUMWP-Ban < 1.69.1 - Admin+ Stored XSSEPSS 0.9%CVE-2023-2122—Image Optimizer by 10web < 1.0.27 - Reflected Cross-Site ScriptingEPSS 0.9%CVE-2023-0948MEDIUMJapanized For WooCommerce < 2.5.8 - Reflected XSSEPSS 0.9%CVE-2023-2592—FormCraft Premium < 3.9.7 - Admin+ SQLiEPSS 0.9%CVE-2023-1425HIGHGroundhogg Contacts < 2.7.9.4 - Admin+ SQLiEPSS 0.9%