Vulnerabilidades em fahadmahmood

14 resultados
Análise Vexday

O fornecedor fahadmahmood apresenta 14 vulnerabilidades na base, com 1 crítica identificada, mas nenhuma sob ataque ativo conhecido. A fraqueza dominante é injeção de conteúdo (CWE-79), padrão em aplicações web, com apenas 1 CVE publicado nos últimos 90 dias, indicando risco moderado e estável.

CVE-2022-1820MEDIUMKeep Backup Daily <= 2.0.2 - Reflected Cross-Site ScriptingEPSS 1.1%CVE-2024-3895HIGHWP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateEPSS 0.9%CVE-2025-12682CRITICALEasy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File UploadEPSS 0.6%CVE-2024-12468MEDIUMWP Datepicker <= 2.1.4 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-12635MEDIUMWP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'EPSS 0.4%CVE-2026-3339LOWKeep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' ParameterEPSS 0.4%CVE-2024-10057MEDIUMRSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos ShortcodeEPSS 0.3%CVE-2026-3368HIGHInjection Guard <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via Query Parameter NameEPSS 0.3%CVE-2024-12405MEDIUMExport Customers Data <= 1.2.3 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-13387MEDIUMWP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-6802MEDIUMEasy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'eufdc-delete' ParameterEPSS 0.2%CVE-2025-12075MEDIUMOrder Splitter for WooCommerce <= 5.3.5 - Missing Authorization to Authenticated (Subscriber+) Order Information ExposureEPSS 0.2%CVE-2026-3878MEDIUMWP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'EPSS 0.2%CVE-2026-3577MEDIUMKeep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup TitleEPSS 0.2%