Vulnerabilidades em unknown
4.771 resultadosAnálise Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2021-25037—All In One SEO < 4.1.5.3 - Authenticated SQL InjectionEPSS 1.3%CVE-2022-1977—WP Ultimate CSV Importer < 6.5.3 - Admin+ Blind SSRFEPSS 1.3%CVE-2022-1777—Filr - Secure Document Library < 1.2.2.1 - Subscriber+ AJAX CallsEPSS 1.3%CVE-2022-0255—Database Backup for WordPress < 2.5.1 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-25068—Sync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLiEPSS 1.3%CVE-2021-24860—BSK PDF Manager < 3.1.2 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24778—Tradetracker-Store < 4.6.60 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24774—Check & Log Email < 1.0.3 - Admin+ SQL InjectionsEPSS 1.3%CVE-2021-24861—Quotes Collection <= 2.5.2 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-4208—ExportFeed <= 2.0.1.0 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-24889—Ninja Forms < 3.6.4 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-0267—AdRotate < 5.8.22 - Admin+ SQL InjectionEPSS 1.3%CVE-2021-25067—Landing Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 1.3%CVE-2022-1051—WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fieldsEPSS 1.3%CVE-2022-1421—Discy < 5.2 - Settings Update via CSRFEPSS 1.3%CVE-2022-2168—Download Manager < 3.2.44 - Reflected Cross-Site ScriptingEPSS 1.3%CVE-2022-0887—Easy Social Icons < 3.1.4 - Admin+ SQL InjectionEPSS 1.3%CVE-2022-0535—E2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)EPSS 1.3%CVE-2023-4314HIGHwpDataTables < 2.1.66 - Admin+ PHP Object InjectionEPSS 1.3%CVE-2021-24143—AccessPress Social Icons < 1.8.1 - Authenticated SQL InjectionEPSS 1.3%