Vulnerabilidades en unknown
4777 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2022-2891—WP 2FA < 2.3.0 - Time-Based Side-Channel AttackEPSS 0.8%CVE-2024-13627MEDIUMWP Touch Slider <= 2.2 - Reflected XSSEPSS 0.8%CVE-2024-11921MEDIUMGive < 3.19.0 - Reflected XSSEPSS 0.8%CVE-2024-3753MEDIUMHostel < 1.1.5.3 - Reflected XSSEPSS 0.8%CVE-2023-0328—WPCode < 2.0.7 - Contributor+ WPCode Library Auth Key Update/DeletionEPSS 0.8%CVE-2021-25047—10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-24924—Email Log < 2.4.8 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24932—Auto Featured Image < 3.9.3 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24921—Advanced Database Cleaner < 3.0.4 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24909—ACF Photo Gallery Field < 1.7.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-22734—Simple Quotation <= 1.3.2 - Quote Creation/Edition via CSRF to Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-0503—Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0627—Amelia < 1.0.46 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24697—Simple Download Monitor < 3.9.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24984—WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24941—Icegram < 2.0.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24874—Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-3664HIGHFileOrganizer <= 1.0.2 - Admin+ Arbitrary File AccessEPSS 0.8%CVE-2022-0449—Flexi - Guest Submit < 4.20 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24980—Gwolle Guestbook < 4.2.0 - Reflected Cross-Site ScriptingEPSS 0.8%