Vulnerabilidades em unknown

4.767 resultados
Análise Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2021-24392—WordPress Membership SwiftCloud.io <= 1.0 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-24393—Comment Highlighter <= 0.13 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-24557—M-vSlider <= 2.1.3 - Authenticated (admin+) SQL InjectionEPSS 1.5%CVE-2021-24336—FlightLog <= 3.0.2 - Authenticated (editor+) SQL InjectionEPSS 1.5%CVE-2021-24394—Easy Testimonial Manager <= 1.2.0 - Authenticated SQL InjectionEPSS 1.5%CVE-2022-1683—amtyThumb <= 4.2.0 - Subscriber+ SQLiEPSS 1.5%CVE-2022-0478—Event Manager for WooCommerce < 3.5.8 - Contributor+ SQL InjectionEPSS 1.5%CVE-2021-24511—Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL InjectionEPSS 1.5%CVE-2022-0230—Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site ScriptingEPSS 1.5%CVE-2018-25019—LearnDash < 2.5.4 - Unauthenticated Arbitrary File UploadEPSS 1.5%CVE-2021-25107—Form Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site ScriptingEPSS 1.5%CVE-2022-1166—JobMonster < 4.6.6.1 - Directory Listing in Upload FolderEPSS 1.5%CVE-2023-1406HIGHJetEngine < 3.1.3.1 - Author+ Remote Code ExecutionEPSS 1.5%CVE-2021-24631—Unlimited PopUps <= 4.5.3 - Author+ SQL InjectionEPSS 1.5%CVE-2021-24630—Schreikasten <= 0.14.18 - Author+ SQL InjectionsEPSS 1.5%CVE-2022-0411—Asgaros Forum < 2.0.0 - Subscriber+ Blind SQL InjectionEPSS 1.5%CVE-2021-24399—The Sorter <= 1.0 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-24398—Responsive 3D Slider <= 1.2 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-24397—MicroCopy <= 1.1.0 - Authenticated SQL InjectionEPSS 1.5%CVE-2021-25087—Wordpress Download Manager < 3.2.25 - Sensitive Information DisclosureEPSS 1.5%