Vulnerabilidades en unknown
4777 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2022-0442—UsersWP < 1.2.3.1 - Subscriber+ User Avatar OverrideEPSS 0.7%CVE-2021-24918—Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSSEPSS 0.7%CVE-2021-24698—Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails RemovalEPSS 0.7%CVE-2021-24816—Phoenix Media Rename < 3.4.4 - Author Arbitrary Media File RenamingEPSS 0.7%CVE-2021-25049—Mobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-1566—Quotes llama < 1.0.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24594—Translate WordPress - Google Language Translator < 6.0.12 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2023-1371MEDIUMW4 Post List < 2.4.6 - Subscriber+ Password Protected Post Content DisclosureEPSS 0.7%CVE-2023-0911MEDIUMShortcodes Ultimate < 5.12.8 - Subscriber+ User Meta DisclosureEPSS 0.7%CVE-2021-24616—AddToAny Share Buttons < 1.7.48 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24134—Constant Contact Forms < 1.8.8 - Multiple Authenticated Stored XSSEPSS 0.7%CVE-2021-24830—Advanced Access Manager < 6.8.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24608—Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2023-5239—Security & Malware scan by CleanTalk < 2.121 - IP SpoofingEPSS 0.7%CVE-2021-24127—ThirstyAffiliates < 3.9.3 - Authenticated Stored XSSEPSS 0.7%CVE-2021-24331—Smooth Scroll Page Up/Down Buttons < 1.4 - Authenticated Stored XSSEPSS 0.7%CVE-2021-24450—ProfilePress < 3.1.8 - Authenticated Stored XSSEPSS 0.7%CVE-2021-24330—Funnel Builder by CartFlows < 1.6.13 - Authenticated Stored XSS via FB Pixel ID and Google Analytics IDEPSS 0.7%CVE-2022-2181—Advanced WordPress Reset < 1.6 - Reflected Cross-Site ScriptingEPSS 0.7%CVE-2021-24672—One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site ScriptingEPSS 0.7%