Vulnerabilidades em Unknown

5.591 resultados
Análise Vexday

O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.

CVE-2024-8051MEDIUMSpecial Feed Items <= 1.0.1 - Stored XSS via CSRFEPSS 0.2%CVE-2024-8093MEDIUMPosts reminder <= 0.20 - Settings Update via CSRFEPSS 0.2%CVE-2024-3407MEDIUMWP Prayer <= 2.0.9 - Arbitrary Prayer Deletion via CSRFEPSS 0.2%CVE-2026-96526LOWMCP Server for WordPress < 1.8.2 - Contributor+ Arbitrary Post Title Disclosure via workflows/run REST RouteEPSS 0.2%CVE-2024-13118MEDIUMIP Based Login < 2.4.1 - Log Deletion via CSRFEPSS 0.2%CVE-2026-16281HIGHClassified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOREPSS 0.2%CVE-2026-1430MEDIUMWP Lightbox 2 < 3.0.7 - Admin+ Stored XSSEPSS 0.2%CVE-2026-88912MEDIUMrtMedia for WordPress, BuddyPress and bbPress < 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOREPSS 0.2%CVE-2022-4363MEDIUMWholesale Market <= 2.2.2 - Settings Update via CSRFEPSS 0.2%CVE-2026-19857MEDIUMFormidable Forms < 6.35 - Unauthenticated Arbitrary Shortcode Execution via [entry_key] Custom HTML TokenEPSS 0.2%CVE-2026-97227MEDIUMNextScripts: Social Networks Auto-Poster < 4.4.8 - Authenticated Social Account Credential Disclosure and Data DeletionEPSS 0.2%CVE-2026-81653MEDIUMNextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOREPSS 0.2%CVE-2024-10892MEDIUMCost Calculator Builder < 3.2.43 - Settings update via CSRFEPSS 0.2%CVE-2024-7818MEDIUMMisiek Photo Album <= 1.4.3 - Stored XSS via CSRFEPSS 0.2%CVE-2024-6017MEDIUMMusic Request Manager <= 1.3 - Stored XSS via CSRFEPSS 0.2%CVE-2024-5081MEDIUMWP eMember <= v10.7.0 - Stored XSS via CSRFEPSS 0.2%CVE-2024-7860MEDIUMSimple Headline Rotator <= 1.0 - Stored XSS via CSRFEPSS 0.2%CVE-2026-82843CRITICALWP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token SubstitutionEPSS 0.2%CVE-2024-7822MEDIUMQuick Code <= 1.0 - Stored XSS via CSRFEPSS 0.2%CVE-2024-7816MEDIUMGixaw Chat <= 1.0 - Stored XSS via CSRFEPSS 0.2%