Vulnerabilidades en unknown
4777 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2022-2834MEDIUMHelpful < 4.5.26 - Information DisclosureEPSS 0.8%CVE-2023-6203—The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post ReadEPSS 0.8%CVE-2021-24473—User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOREPSS 0.8%CVE-2024-6536MEDIUMZephyr Project Manager < 3.3.99 - Editor+ XSSEPSS 0.8%CVE-2022-0626—Advanced Admin Search < 1.1.6 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1528—VikBooking < 1.5.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-2178—Aajoda Testimonials < 2.2.2 - Admin+ Stored XSSEPSS 0.8%CVE-2021-25051—Modal Window < 5.2.2 - RFI leading to RCE via CSRFEPSS 0.8%CVE-2022-1773—WP Athletics <= 1.1.7 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1241—Ask Me < 6.8.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-1582—External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-1673—WooCommerce Green Wallet Gateway < 1.0.2 - Reflected Cross Site Scripting in checkout pageEPSS 0.8%CVE-2022-1009—Smush < 3.9.9 - Admin+ Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-3994MEDIUMAuthenticator < 1.3.1 - Subscriber+ Denial of Service via Feed Token DisclosureEPSS 0.8%CVE-2021-24151HIGHWP Editor < 1.2.7 - Authenticated SQL injectionEPSS 0.8%CVE-2021-24905—Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File DeletionEPSS 0.8%CVE-2021-24617—GamePress <= 1.1.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2024-0780HIGHEnjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database ResetEPSS 0.8%CVE-2021-24781—Image Source Control < 2.3.1 - Contributor+ Arbitrary Post Meta Value ChangeEPSS 0.8%CVE-2023-5906—Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data ExposureEPSS 0.8%