Vulnerabilidades en unknown

4777 resultados
Análisis Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24561—WP SMS < 5.4.13 - Authenticated Stored Cross-Site ScriptingEPSS 0.7%CVE-2024-2908MEDIUMCall Now Button < 1.4.7 - Admin+ Stored XSSEPSS 0.7%CVE-2021-25053—WP Coder < 2.5.2 - RFI leading to RCE via CSRFEPSS 0.7%CVE-2022-4340MEDIUMBookingPress < 1.0.31 - Unauthenticated IDOR in appointment_idEPSS 0.7%CVE-2022-2080—Sensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOREPSS 0.7%CVE-2021-24502—WP Google Map < 1.7.7 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2022-4657MEDIUMRestaurant Menu < 2.3.6 - Contributor+ Stored XSS via ShortcodeEPSS 0.7%CVE-2022-3247MEDIUMBlog2Social < 6.9.10 - Subscriber+ SSRFEPSS 0.7%CVE-2022-1334—WP YouTube Live < 1.8.3 - Admin+ Stored Cross Site ScriptingEPSS 0.7%CVE-2022-2072—Name Directory < 1.25.3 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2024-2761MEDIUMGenesis Blocks < 3.1.3 - Contributor+ Stored XSSEPSS 0.7%CVE-2024-6517MEDIUMContact Form 7 Math Captcha <= 2.0.1 - Reflected XSSEPSS 0.7%CVE-2023-2117LOWImage Optimizer by 10web < 1.0.27 - Admin+ Path TraversalEPSS 0.7%CVE-2023-6077—Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post AccessEPSS 0.7%CVE-2022-1579HIGHLogin Block IPs <= 1.0.0 - IP Spoofing BypassEPSS 0.7%CVE-2021-24261—HT Mega - Absolute Addons for Elementor Page Builder < 1.5.7 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24260—Livemesh Addons for Elementor < 6.8 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24263—PowerPack Addons for Elementor < 2.3.2 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24267—All-in-One Addons for Elementor - WidgetKit < 2.3.10 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24126—Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site ScriptingEPSS 0.7%