Vulnerabilidades en unknown
4789 resultadosAnálisis Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2023-6383HIGHDebug Log Manager < 2.3.0 - Sensitive Logs ExposureEPSS 0.6%CVE-2020-36504—WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRFEPSS 0.6%CVE-2021-24856—Shared Files < 1.6.61 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24649CRITICALWP User Frontend < 3.5.29 - Obscure Registration as AdminEPSS 0.6%CVE-2021-24500—Workreap theme < 2.2.2 - Multiple CSRF + IDOR VulnerabilitiesEPSS 0.6%CVE-2021-24982—Child Theme Generator <= 2.2.7 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2023-4151MEDIUMStore Locator WordPress < 1.4.13 - Reflected XSSEPSS 0.6%CVE-2024-5807HIGHBusiness Card <= 1.0.0 - Admin+ File UploadEPSS 0.6%CVE-2022-0134—AnyComment < 0.2.18 - Arbitrary HyperComments Import/Revert via CSRFEPSS 0.6%CVE-2022-1349—WPQA < 5.2 - Subscriber+ Arbitrary Profile Picture Deletion via IDOREPSS 0.6%CVE-2022-0884—Profile Builder < 3.6.8 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-0958—Mark Posts < 2.0.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24800—DW Question & Answer Pro <= 1.3.4 - Arbitrary Comment Edition via IDOREPSS 0.6%CVE-2022-2115—Popup Anything < 2.1.7 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2023-7204HIGHWP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data ExposureEPSS 0.6%CVE-2021-24622—WP Ticket < 5.10.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24612—Sociable <= 4.3.4.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24740—Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24736—Shared Files < 1.6.57 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-4310MEDIUMSlimstat Analytics < 4.9.3 - Unauthenticated Stored XSSEPSS 0.6%