Vulnerabilidades en unknown

4789 resultados
Análisis Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24620—Simple eCommerce <= 2.2.5 - Arbitrary File UploadEPSS 0.6%CVE-2023-0428HIGHWatu Quiz < 3.3.8.2 - Reflected XSSEPSS 0.6%CVE-2021-24187—SEO Redirection < 6.4 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24180—Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.6%CVE-2022-0447—Post Grid < 2.1.16 - Reflected Cross-Site Scripting via post_typesEPSS 0.6%CVE-2024-2101MEDIUMWordPress Plugin Salon Booking System < 9.6.3 - Unauthenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24696—Simple Download Monitor < 3.9.9 - Multiple CSRFEPSS 0.6%CVE-2022-2198—WPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOREPSS 0.6%CVE-2022-1581MEDIUMWP-Polls < 2.76.0 - IP Validation BypassEPSS 0.6%CVE-2024-0852HIGHcoreActivity < 1.8.1 - Unauthenticated Stored XSSEPSS 0.6%CVE-2024-13628MEDIUMWP Pricing Table <= 1.1 - Reflected XSSEPSS 0.6%CVE-2024-8855CRITICALWordPress Auction <= 3.7 - Editor+ SQL InjectionEPSS 0.6%CVE-2021-24716—Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24723—WP Reactions Lite < 1.3.6 - Authenticated Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24682—Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24424—WP Reset < 1.90 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24168—Easy Contact Form Pro < 1.1.1.9 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24803—Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRFEPSS 0.6%CVE-2021-24211—WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2023-3131—MStore API < 3.9.7 - Subscriber+ Unauthorized Settings UpdateEPSS 0.6%