Vulnerabilidades em unknown
4.777 resultadosAnálise Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2021-24939—LoginWP < 3.0.0.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0503—Multisite Content Copier/Updater < 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0347—LoginPress < 1.5.12 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24697—Simple Download Monitor < 3.9.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25039—Multisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24578—SportsPress < 2.7.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24937—Asset CleanUp < 1.3.8.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24932—Auto Featured Image < 3.9.3 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0449—Flexi - Guest Submit < 4.20 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-3664HIGHFileOrganizer <= 1.0.2 - Admin+ Arbitrary File AccessEPSS 0.8%CVE-2021-25047—10Web Social Photo Feed < 1.4.29 - Reflected Cross-Site Scripting (XSS)EPSS 0.8%CVE-2021-25091—Link Library < 7.2.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25019—SEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24874—Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24798—WP Header Images < 2.0.1 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-25038—Multisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2022-0737—Text Hover < 4.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.8%CVE-2022-4108MEDIUMWholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File DownloadEPSS 0.8%CVE-2021-24783—Post Expirator < 2.6.0 - Contributor+ Arbitrary Post Schedule DeletionEPSS 0.8%CVE-2022-4794HIGHAAWP < 3.12.3 - Unsafe URL HandlingEPSS 0.8%