Vulnerabilidades em UNKNOWN
6.349 resultadosAnálise Vexday
O fornecedor UNKNOWN possui apenas 1 CVE registrado na base do Vexday, sem evidências de exploração ativa em campo (KEV=0) e nenhuma vulnerabilidade crítica associada. A ausência de publicações recentes e informações sobre a fraqueza dominante limitam a análise de risco, sugerindo baixa visibilidade ou relevância na inteligência atual.
CVE-2026-115223MEDIUMSmart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text BlockEPSS 0.4%CVE-2026-15210CRITICALLogin/Signup with Phone Number, OTP Verification < 1.8.71 - Unauthenticated Account Takeover via OTP Brute ForceEPSS 0.4%CVE-2024-2376HIGHWPQA < 6.1.1 - Arbitrary Category and Tag Follow/Unfollow via CSRFEPSS 0.4%CVE-2026-16055HIGHContest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass via post_cg_loginEPSS 0.4%CVE-2026-13175MEDIUMEventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOREPSS 0.4%CVE-2023-2707MEDIUMAppointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSSEPSS 0.4%CVE-2026-16038CRITICALMStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment GatewaysEPSS 0.4%CVE-2026-19840MEDIUMNotiqoo < 1.4.14 - Contributor+ Arbitrary Option Update via Multiple AJAX ActionsEPSS 0.4%CVE-2024-10009MEDIUMWebsite File Changes < 2.1.0 - Admin+ Authenticated SQL InjectionEPSS 0.4%CVE-2026-19714CRITICALSimple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience ValidationEPSS 0.4%CVE-2024-2439MEDIUMSalon booking system <= 9.6.5 - Editor+ Stored XSSEPSS 0.4%CVE-2026-13332CRITICALMasteriyo LMS < 2.3.1 - Unauthenticated Arbitrary User Session Termination (Denial of Service)EPSS 0.4%CVE-2026-15930CRITICALSimple Membership < 4.7.8 - Unauthenticated Administrator Account Takeover via Registration Username CollisionEPSS 0.4%CVE-2026-19077MEDIUMCopy & Delete Posts < 1.5.5 - Authenticated Arbitrary Post Deletion via Missing Object-Level AuthorizationEPSS 0.4%CVE-2026-16057MEDIUMContest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_libraryEPSS 0.4%CVE-2024-4269MEDIUMSVG Block < 1.1.20 - Author+ Stored XSS via SVG File UploadEPSS 0.4%CVE-2026-88904HIGHPuppyFW <= 0.4.4 - Subscriber+ Arbitrary Blog Options Update and Deletion Leading to Privilege EscalationEPSS 0.4%CVE-2024-10638MEDIUMProduct Labels For Woocommerce < 1.5.11 - Admin+ SQLiEPSS 0.4%CVE-2022-3632MEDIUMOAuth Client by DigitialPixies <= 1.1.0 - CSRFEPSS 0.4%CVE-2026-12525HIGHRedux Framework < 4.5.13 - Subscriber+ Privilege Escalation to AdministratorEPSS 0.4%