Vulnerabilidades em Unknown
5.591 resultadosAnálise Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2026-97317MEDIUMGiveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway PageEPSS 0.2%CVE-2026-1542MEDIUMSuper Stage WP <= 1.0.1 - Unauthenticated PHP Object InjectionEPSS 0.2%CVE-2026-93511MEDIUMPremium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification BypassEPSS 0.2%CVE-2026-1753MEDIUMGutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options UpdateEPSS 0.2%CVE-2026-81339MEDIUMMasterStudy LMS < 3.7.50 - Subscriber+ Quiz Attempt Grade Disclosure via IDOREPSS 0.2%CVE-2026-2343MEDIUMPeproDev Ultimate Invoice <= 2.2.5 - Unauthenticated Invoice Archive DownloadEPSS 0.2%CVE-2026-86610MEDIUMDownload Manager < 3.3.71 - Author+ Stored XSS via Package IconEPSS 0.2%CVE-2025-12569MEDIUMWP Front User Submit < 5.0.0 - Open RedirectEPSS 0.2%CVE-2026-88797HIGHVayu X < 1.0.6 - Subscriber+ Arbitrary WordPress.org Plugin Installation and ActivationEPSS 0.2%CVE-2026-16600HIGHSmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_imageEPSS 0.2%CVE-2025-8594LOWPz-LinkCard < 2.5.7 - Contributor+ SSRFEPSS 0.2%CVE-2026-16264MEDIUMNewsletters < 4.18.1 - Unauthenticated Subscriber Record Overwrite and PII Disclosure via IDOREPSS 0.2%CVE-2025-10357MEDIUMSimple SEO < 2.0.32 - Contributor+ Stored XSSEPSS 0.2%CVE-2026-86841MEDIUMBookly 23.2 - 28.2 - Bookly Administrator+ PHP Object Injection via Diagnostics Advanced OptionsEPSS 0.2%CVE-2026-91078HIGHTillKit < 1.0.5 - Unauthenticated POS Takeover via Hard-Coded Default Manager PINEPSS 0.2%CVE-2024-2040MEDIUM Himer - Social Questions and Answers < 2.1.1 - Arbitrary Group Joining via CSRFEPSS 0.2%CVE-2024-6857MEDIUMWP MultiTasking <= 0.1.12 - Header/Footer/Body Script Update via CSRFEPSS 0.2%CVE-2024-2235MEDIUM Himer - Social Questions and Answers < 2.1.1 - Bypass Poll Voting Restrictions via CSRFEPSS 0.2%CVE-2026-89001MEDIUMWPeMatico RSS Feed Fetcher < 2.8.27 - Contributor+ Post Publication and Author Spoofing via Campaign SettingsEPSS 0.2%CVE-2024-8092MEDIUMAccordion Image Menu <= 3.1.3 - Stored XSS via CSRFEPSS 0.2%