Vulnerabilidades em Unknown
6.263 resultadosAnálise Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-0189—WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)EPSS 2.2%CVE-2021-24838—AnyComment < 0.3.5 - Open RedirectEPSS 2.2%CVE-2021-24223—N5 Upload Form <= 1.0 - Unauthenticated Arbitrary File Upload to RCEEPSS 2.2%CVE-2023-5203HIGHWP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injectionEPSS 2.2%CVE-2023-2606—WP Brutal AI < 2.06 - Admin+ Stored XSSEPSS 2.2%CVE-2022-0594—Shareaholic < 9.7.6 - Information DisclosureEPSS 2.2%CVE-2021-25112—WHMCS Bridge < 6.4b - Reflected Cross-Site Scripting (XSS)EPSS 2.2%CVE-2022-1221—Gwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site ScriptingEPSS 2.2%CVE-2023-3076—MStore API < 3.9.9 - Unauthenticated Privilege EscalationEPSS 2.2%CVE-2021-25074—WebP Converter for Media < 4.0.3 - Unauthenticated Open redirectEPSS 2.2%CVE-2021-25099—Give < 2.17.3 - Unauthenticated Reflected Cross-Site ScriptingEPSS 2.1%CVE-2024-6330CRITICALGEO my WordPress < 4.4.0.2 - Unauthenticated RCE via LFIEPSS 2.1%CVE-2023-2571MEDIUMQuiz Maker < 6.4.2.7 - Reflected XSSEPSS 2.1%CVE-2022-0316CRITICALMultiple themes - Unauthenticated Arbitrary File UploadEPSS 2.1%CVE-2021-25063—Contact Form 7 Skins < 2.5.1 - Reflected Cross-Site Scripting (XSS)EPSS 2.1%CVE-2024-4180CRITICALThe Events Calendar < 6.4.0.1 - Reflected XSSEPSS 2.1%CVE-2022-2535—SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title DisclosureEPSS 2.1%CVE-2026-12394CRITICALMemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to AdministratorEPSS 2.1%CVE-2021-24384—JoomSport < 5.1.8 - Unauthenticated PHP Object InjectionEPSS 2.1%CVE-2022-0346—Google XML Sitemap Generator < 2.0.4 - Reflected Cross-Site ScriptingEPSS 2.1%