Vulnerabilidades em Unknown
5.591 resultadosAnálise Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2024-7861MEDIUMMisiek Paypal <= 1.1.20090324 - Stored XSS via CSRFEPSS 0.2%CVE-2025-15481MEDIUMNotification Bar for WordPress <= 1.1.8 – Unauthenticated Subscriber Data DisclosureEPSS 0.2%CVE-2026-1900MEDIUMLink Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta UpdateEPSS 0.2%CVE-2024-9450MEDIUMFree Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.15 - Subscriber+ PayPal Settings UpdateEPSS 0.2%CVE-2026-87071MEDIUMForminator Forms < 1.57.2.1 - Unauthenticated Post Meta Injection on Submitted PostsEPSS 0.2%CVE-2026-82841MEDIUMUpdraftPlus 1.23.8 - 1.26.7 - Subscriber+ Remote Storage Credential Disclosure via Migration NoticeEPSS 0.2%CVE-2026-84027MEDIUMDirectorist 8.9.1 - 8.9.4 - Subscriber+ Paid Order and Payment Record Forgery via REST Orders EndpointEPSS 0.2%CVE-2024-4529MEDIUMBusiness Card <= 1.0.0 - Category Deletion via CSRFEPSS 0.2%CVE-2025-10567MEDIUMFunnelKit < 3.12.0.1 - Reflected XSSEPSS 0.2%CVE-2026-79618MEDIUMWP User Frontend < 4.3.12 - Subscriber+ Post Creation via Subscription-Gated FormEPSS 0.2%CVE-2026-18364MEDIUMZportals < 6.4.2 - Subscriber+ Arbitrary Plugin Settings UpdateEPSS 0.2%CVE-2026-81809HIGHPaytm Payment Gateway < 2.8.9 - Unauthenticated SQLi via Payment CallbackEPSS 0.2%CVE-2026-97219MEDIUMMStore API 4.21.1 - 4.22.0 - Subscriber+ Payment Bypass via 'status' ParameterEPSS 0.2%CVE-2024-11607MEDIUMGTPayment Donations <= 1.0.0 - Stored XSS via CSRFEPSS 0.2%CVE-2025-9543LOWFlexTable Google Sheets Connector < 3.19.2 - Admin+ Stored XSSEPSS 0.2%CVE-2023-7174HIGHaBitGone CommentSafe <= 1.0.0 - Settings Update to Stored XSS via CSRFEPSS 0.2%CVE-2026-84744MEDIUMWPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field RepopulationEPSS 0.2%CVE-2026-19856MEDIUMAll in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search QueryEPSS 0.2%CVE-2026-86601MEDIUMWP Recipe Maker < 10.8.2 - Unauthenticated Arbitrary Shortcode Execution via Comment ContentEPSS 0.2%CVE-2024-4475MEDIUMWP Logs Book <= 1.0.1 - Log Clearing via CSRFEPSS 0.2%