Vulnerabilidades en unknown
4777 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2021-24136—Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSSEPSS 0.8%CVE-2021-24297—Goto < 2.1 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24555—Diary & Availability Calendar <= 1.0.3 - Authenticated (subscriber+) SQL InjectionEPSS 0.8%CVE-2023-0812HIGHActive Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data DisclosureEPSS 0.8%CVE-2021-24881HIGHPassster < 3.5.5.9 - Protection Bypass & Arbitrary Post AccessEPSS 0.8%CVE-2024-6451HIGHAI Engine < 2.5.1 - Admin+ RCEEPSS 0.8%CVE-2024-3032MEDIUMThemify Builder < 7.5.8 - Open RedirectEPSS 0.8%CVE-2023-4536HIGHMy Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File UploadEPSS 0.8%CVE-2023-5931—rtMedia for WordPress, BuddyPress and bbPress < 4.6.16 - Subscriber+ RCEEPSS 0.8%CVE-2022-2558—Simple Job Board < 2.10.0 - Resume Disclosure via Directory ListingEPSS 0.8%CVE-2022-1474—WP Event Manager < 3.1.28 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-7246MEDIUMSystem Dashboard < 2.8.10 - XSS via Header InjectionEPSS 0.8%CVE-2023-4148MEDIUMDitty < 3.1.25 - Reflected XSSEPSS 0.8%CVE-2023-3155HIGHNextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and DeleteEPSS 0.8%CVE-2023-6294HIGHpopup-builder < 4.2.6 - Admin+ SSRF & File ReadEPSS 0.8%CVE-2023-0377—Scriptless Social Sharing < 3.2.2 - Contributor+ Stored XSSEPSS 0.8%CVE-2021-24981—Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File UploadEPSS 0.8%CVE-2021-24923—Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSSEPSS 0.8%CVE-2021-4222—WP Paginate < 2.1.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2021-25024—Event Calendar < 1.1.51 - Reflected Cross-Site ScriptingEPSS 0.8%