Vulnerabilidades em UNKNOWN

6.367 resultados
Análise Vexday

O fornecedor UNKNOWN possui apenas 1 CVE registrado na base do Vexday, sem evidências de exploração ativa em campo (KEV=0) e nenhuma vulnerabilidade crítica associada. A ausência de publicações recentes e informações sobre a fraqueza dominante limitam a análise de risco, sugerindo baixa visibilidade ou relevância na inteligência atual.

CVE-2026-115300MEDIUMContact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRFEPSS 0.1%CVE-2026-85348MEDIUMGDPR Data Request Form 1.5 - 1.7.1 - DPO Email Update via CSRFEPSS 0.1%CVE-2026-105260MEDIUMDatabase Addon For WPForms < 1.1.1 - Arbitrary Form Entry Deletion via CSRFEPSS 0.1%CVE-2026-122003HIGHAbilities Bridge < 1.4.2 - Administrator Account Creation via CSRFEPSS 0.1%CVE-2026-115183LOWQi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text WidgetEPSS 0.1%CVE-2026-115299MEDIUMContact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRFEPSS 0.1%CVE-2026-88785MEDIUMSimple Membership < 4.8.3 - Newly Registered Member Password Disclosure via URL Query StringEPSS 0.1%CVE-2026-109150HIGHWP PageNavi Style <= 1.4 - Stored XSS via CSRFEPSS 0.1%CVE-2026-91832HIGHWP Mobile Menu 2.7.4 - 2.8.8 - Stored XSS via CSRFEPSS 0.1%CVE-2026-125711LOWTrustindex Review Widget Plugins < 14.3 - Editor+ Stored XSS via Business NameEPSS —CVE-2026-124833CRITICALAhime Image Printer <= 1.0.0 - Unauthenticated Arbitrary File UploadEPSS —CVE-2026-124763CRITICALAM Wishlist <= 1.1.0 - Unauthenticated Option Overwrite via amwl_upload_fileEPSS —CVE-2026-121853MEDIUMAppPresser < 5.0.0 - Unauthenticated Plugin and Theme Version DisclosureEPSS —CVE-2026-124664MEDIUMMine CloudVod < 2.6.7 - Unauthenticated Paid Lesson Content DisclosureEPSS —CVE-2026-124822CRITICALEasy DragDrop File Uploader < 1.1.10 - Unauthenticated Arbitrary File Deletion via Path TraversalEPSS —CVE-2026-118064CRITICALAdvance Guest Post <= 1.9 - Unauthenticated Arbitrary File Upload via featured_actionEPSS —CVE-2026-116059HIGHLetsRecover <= 1.2.0 - Unauthenticated SQL InjectionEPSS —CVE-2026-123097HIGHWP Remote Users Sync < 2.2.1 - Privilege Escalation to Administrator via 'create' and 'update' Sync ActionsEPSS —CVE-2026-123670MEDIUMEssential Real Estate 5.3.5 - Customer+ Email Relay Allowlist PoisoningEPSS —CVE-2026-125912HIGHWP Ultimate CSV Importer < 9.2 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via Media ImportEPSS —