Vulnerabilidades en unknown
4777 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2022-1527—WP 2FA < 2.2.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1604—MailerLite < 1.5.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24742—Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings UpdateEPSS 0.8%CVE-2021-24325—404 SEO Redirection <= 1.3 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24362—Photo Gallery < 1.5.75 - Stored Cross-Site Scripting via Uploaded SVGEPSS 0.8%CVE-2021-24438—ShareThis Dashboard for Google Analytics < 2.5.2 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24437—Favicon by RealFaviconGenerator <= 1.3.20 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2022-2554—Enable Media Replace < 4.0.0 - Admin+ Path TraversalEPSS 0.8%CVE-2021-24373—WP Hardening < 1.2.2 - Reflected XSS via historyvalueEPSS 0.8%CVE-2021-24372—WP Hardening < 1.2.2 - Reflected XSS via URIEPSS 0.8%CVE-2021-24632—Recipe Card Blocks < 2.8.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24496—Community Event < 1.4.8 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24676—Better Find and Replace < 1.2.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24679—Bitcoin / AltCoin Payment Gateway for WooCommerce < 1.6.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24588—SMS Alert Order Notifications – WooCommerce < 3.4.7 Authenticated Cross Site ScriptingEPSS 0.8%CVE-2022-3694HIGHSyncee - Global Dropshipping < 1.0.10 - Authentication Token DisclosureEPSS 0.8%CVE-2021-24770—Stylish Price List < 6.9.1 - Subscriber+ Arbitrary Image UploadEPSS 0.8%CVE-2023-2009MEDIUMPretty Url <= 1.5.4 - Admin+ Stored XSS in plugin settingsEPSS 0.8%CVE-2023-1977—Booking Manager < 2.0.29 - Subscriber+ SSRFEPSS 0.8%CVE-2023-0940HIGHProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password ResetEPSS 0.8%