Vulnerabilidades em unknown

4.767 resultados
Análise Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24182—Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_answers_by_questionEPSS 1.7%CVE-2023-2688MEDIUMWordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path TraversalEPSS 1.7%CVE-2021-24916—Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail SendingEPSS 1.7%CVE-2023-0099—Simple URLs < 115 - Multiple Reflected XSSEPSS 1.7%CVE-2022-0782—Donations <= 1.8 - Unauthenticated SQLiEPSS 1.7%CVE-2022-0657—5 Stars Rating Funnel < 1.2.53 - Unauthenticated SQLiEPSS 1.7%CVE-2021-24430—Speed Booster Pack 4.2.0-beta - Authenticated (admin+) RCEEPSS 1.7%CVE-2022-0150—WP Accessibility Helper (WAH) < 0.6.0.7 - Reflected Cross-Site Scripting (XSS)EPSS 1.7%CVE-2022-0248—Contact Form Submissions < 1.7.3 - Unauthenticated Stored XSSEPSS 1.7%CVE-2024-8673CRITICALZ-Downloads < 1.11.7 - Admin+ Stored XSS via SVG UploadEPSS 1.7%CVE-2023-1208—HTTP Headers < 1.18.11 - Admin+ Remote Code ExecutionEPSS 1.7%CVE-2021-24727—Block and Stop Bad Bots < 6.60 - Authenticated SQL InjectionsEPSS 1.7%CVE-2021-24728—Paid Member Subscriptions < 2.4.2 - Authenticated SQL InjectionEPSS 1.7%CVE-2021-24216—All-in-One WP Migration < 7.41 - Admin+ Arbitrary File Upload to RCEEPSS 1.7%CVE-2022-0599—Mapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site ScriptingEPSS 1.7%CVE-2023-2023MEDIUMCustom 404 Pro < 3.7.3 - Reflected Cross-Site ScriptingEPSS 1.7%CVE-2021-24949—The Plus Addons for Elementor Pro < 5.0.7 - Unauthenticated SQL InjectionEPSS 1.7%CVE-2022-1953—Product Configurator for WooCommerce < 1.2.32 - Unauthenticated Arbitrary File DeletionEPSS 1.7%CVE-2023-4300HIGHImport XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File UploadEPSS 1.7%CVE-2021-4225—SP Project & Document Manager < 4.24 - Subscriber+ Shell UploadEPSS 1.7%