Vulnerabilidades em UNKNOWN
6.367 resultadosAnálise Vexday
O fornecedor UNKNOWN possui apenas 1 CVE registrado na base do Vexday, sem evidências de exploração ativa em campo (KEV=0) e nenhuma vulnerabilidade crítica associada. A ausência de publicações recentes e informações sobre a fraqueza dominante limitam a análise de risco, sugerindo baixa visibilidade ou relevância na inteligência atual.
CVE-2026-16739MEDIUMEpeken All Kurir <= 2.1.4 - Unauthenticated Order Payment Confirmation ForgeryEPSS 0.3%CVE-2026-6858HIGHTransbank Webpay < 1.14.0 - Unauthenticated Stored XSSEPSS 0.3%CVE-2025-13471MEDIUMUser Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option UpdateEPSS 0.3%CVE-2026-103302MEDIUMPayment Gateway for Idram < 2.1.6 - Unauthenticated Payment Confirmation Forgery via Empty-Default Merchant SecretEPSS 0.3%CVE-2026-105992MEDIUMEttrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation BypassEPSS 0.3%CVE-2026-105998MEDIUMBooking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing AuthorizationEPSS 0.3%CVE-2024-7863HIGHFavicon Generator < 2.1 - Arbitrary File Upload via CSRFEPSS 0.3%CVE-2024-12308MEDIUMLogo Slider < 4.6.0 - Contributor+ Stored XSSEPSS 0.3%CVE-2026-110949LOWDownload Manager (Free & Pro) - Unauthenticated Missing Authorization via Password ValidationEPSS 0.3%CVE-2025-0692LOWSimple Video Management System <= 1.0.4 - Admin+ Stored XSSEPSS 0.3%CVE-2026-15381LOWWP Go Maps < 10.1.04 - Unauthenticated SQL Injection via Markers REST filterEPSS 0.3%CVE-2026-105972HIGHWooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation AttributeEPSS 0.3%CVE-2026-16591HIGHWP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon FieldsEPSS 0.3%CVE-2026-77757MEDIUMDirectorist 8.5 - 8.9.2 - Subscriber+ Arbitrary Image Move via REST v2 Listing SubmissionEPSS 0.3%CVE-2026-19842HIGHSAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor OverwriteEPSS 0.3%CVE-2026-81649CRITICALFundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential DisclosureEPSS 0.3%CVE-2024-13668HIGHWordPress Activity O Meter <= 1 - Reflected XSSEPSS 0.3%CVE-2026-114427MEDIUMGutenKit 2.5.0 - 2.5.4 - Author+ Stored XSS via Page Settings Custom CSSEPSS 0.3%CVE-2026-16296MEDIUMClearfy < 2.4.3 - Open Redirect via Cyrlitera 404 HandlerEPSS 0.3%CVE-2026-19698LOWGutenKit < 2.5.1 - Contributor+ Stored CSS InjectionEPSS 0.3%