Vulnerabilidades em UNKNOWN
6.367 resultadosAnálise Vexday
O fornecedor UNKNOWN possui apenas 1 CVE registrado na base do Vexday, sem evidências de exploração ativa em campo (KEV=0) e nenhuma vulnerabilidade crítica associada. A ausência de publicações recentes e informações sobre a fraqueza dominante limitam a análise de risco, sugerindo baixa visibilidade ou relevância na inteligência atual.
CVE-2026-14325LOWDrag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Admin+ Stored XSS via drag_n_drop_heading_tag SettingEPSS 0.2%CVE-2025-15695LOWGTranslate < 3.0.10 - Admin+ Stored XSSEPSS 0.2%CVE-2026-17016LOWRestore PayPal Standard for WooCommerce <= 3.1.0 - Payment Bypass via PDT UnderpaymentEPSS 0.2%CVE-2025-15677LOWGeoDirectory < 2.8.110 - Editor+ Stored XSS via Place CategoriesEPSS 0.2%CVE-2026-9677MEDIUMShariff for WordPress <= 1.0.11 - Admin+ Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-87074LOWForminator Forms < 1.57.2.1 - Unauthenticated Arbitrary Recipient Email Sending with Attacker-Controlled LinkEPSS 0.2%CVE-2025-8113MEDIUMEbook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']EPSS 0.2%CVE-2026-96903MEDIUMEasy Property Listings < 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX HandlersEPSS 0.2%CVE-2024-5284MEDIUMWP Affiliate Platform < 6.5.1 - Stored XSS via CSRFEPSS 0.2%CVE-2026-114431MEDIUMEnable Media Replace < 4.2.3 - Author+ Stored XSS via SVG UploadEPSS 0.2%CVE-2025-15484CRITICALOrder Notification for WooCommerce < 3.6.3 - Unauthenticated WooCommerce REST Permission BypassEPSS 0.2%CVE-2026-11581MEDIUMKali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field CaptionEPSS 0.2%CVE-2024-13146HIGHBooknetic < 4.1.5 - Staff Creation via CSRFEPSS 0.2%CVE-2026-113494LOWGeoDirectory < 2.8.195 - Contributor+ Non-Public Listing Disclosure via gd_post_content ShortcodeEPSS 0.2%CVE-2026-13413MEDIUMCMP - Coming Soon & Maintenance < 4.1.20 - Unauthenticated Maintenance Mode Bypass via Login URL MatchEPSS 0.2%CVE-2026-110507LOWPage Builder by SiteOrigin < 2.38.0 - Contributor+ Sensitive Data Disclosure via Post Loop Widget Query ArgumentsEPSS 0.2%CVE-2026-115224MEDIUMSmart Popup by Supsystic < 2.0.2 - Admin+ SQLi via Popup Page/Category BindingEPSS 0.2%CVE-2026-111031MEDIUMWelcart e-Commerce < 2.12.6 - Unauthenticated Open Redirect via 'usces_referer' ParameterEPSS 0.2%CVE-2022-4309LOWSubscribe2 < 10.38 - User Deletion via CSRFEPSS 0.2%CVE-2026-87780HIGHLTL Freight Quotes – Old Dominion Edition < 4.2.19 - Unauthenticated Stored XSS via Shipping RulesEPSS 0.2%