Vulnerabilidades em Unknown
5.492 resultadosAnálise Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2022-0720—Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data DisclosureEPSS 0.6%CVE-2026-11883HIGHWebAuthn Provider for Two Factor < 2.5.6 - 2FA BypassEPSS 0.6%CVE-2023-6627MEDIUMWP Go Maps < 9.0.28 - Unauthenticated Stored XSSEPSS 0.6%CVE-2022-0837—Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data DisclosureEPSS 0.6%CVE-2022-2378—Easy Student Results <= 2.2.8 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-24665—WP Video Lightbox < 1.9.3 - Contributor+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24704—Orange Form <= 1.0 - SQL Injection via CSRFEPSS 0.6%CVE-2022-2386—Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-3392MEDIUMWP Humans.txt <= 1.0.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2116—Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2021-24667—Gallery Blocks with Lightbox < 2.2.1- Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24613—Post Views Counter < 1.3.5 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24701—Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24515—Video Gallery - Vimeo and YouTube Gallery < 1.1.5 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-12878HIGHCustom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSSEPSS 0.6%CVE-2021-24614—Book appointment Online < 1.39 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24737—Comments - wpDiscuz <= 7.3.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24533—Maintenance < 4.03 - Authenticated Stored XSSEPSS 0.6%CVE-2021-24327—SEO Redirection < 6.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24882—Slideshow Gallery < 1.7.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%