Vulnerabilidades em unknown
4.767 resultadosAnálise Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2021-24272—Fitness Calculators < 1.9.6 - Cross-Site Request Forgery to Cross-Site Scripting (XSS)EPSS 1.8%CVE-2021-24546—EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code ExecutionEPSS 1.8%CVE-2022-0533—Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)EPSS 1.8%CVE-2022-1724—Simple Membership < 4.1.1 - Reflected Cross-Site ScriptingEPSS 1.8%CVE-2021-24545—WP HTML Author Bio <= 1.2.0 - Author+ Stored Cross-Site ScriptingEPSS 1.8%CVE-2024-6420HIGHHide My WP Ghost < 5.2.02 - Hidden Login Page DisclosureEPSS 1.8%CVE-2019-25060—WP-GraphQL < 0.3.5 - Improper Access ControlEPSS 1.8%CVE-2021-25016—Chaty < 2.8.3 - Reflected Cross-Site ScriptingEPSS 1.8%CVE-2022-2219—Unyson < 2.7.27 - Reflected Cross-Site ScriptingEPSS 1.8%CVE-2022-3689HIGHHTML Forms < 1.3.25 - Admin+ SQLiEPSS 1.8%CVE-2022-4774CRITICALBit Form < 1.9 - RCE via Unauthenticated Arbitrary File UploadEPSS 1.8%CVE-2021-24435—Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)EPSS 1.8%CVE-2021-24311—External Media < 1.0.34 - Authenticated Arbitrary File UploadEPSS 1.8%CVE-2023-6036CRITICALWeb3 – Crypto wallet Login & NFT token gating < 3.0.0 - Authentication BypassEPSS 1.8%CVE-2023-2601—WP Brutal AI < 2.0.0 - SQL Injection via CSRFEPSS 1.8%CVE-2021-24229—Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX actionEPSS 1.8%CVE-2022-0836—SEMA API < 4.02 - Unauthenticated SQLiEPSS 1.8%CVE-2022-0234—WOOCS < 1.3.7.5 - Reflected Cross-Site ScriptingEPSS 1.8%CVE-2021-24233—Cooked Pro < 1.7.5.6 - Unauthenticated Reflected Cross Site Scripting (XSS)EPSS 1.7%CVE-2021-24182—Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_questionEPSS 1.7%