Vulnerabilidades em unknown
4.777 resultadosAnálise Vexday
O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.
CVE-2023-6030MEDIUMLogDash Activity Log < 1.1.4 - Unauthenticated SQLiEPSS 0.8%CVE-2023-0279HIGHMedia Library Assistant < 3.06 - Admin+ SQLiEPSS 0.8%CVE-2023-1427MEDIUMPhoto Gallery by 10Web < 1.8.15 - Admin+ Path TraversalEPSS 0.8%CVE-2022-3846HIGHWorkreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOREPSS 0.8%CVE-2021-24859—User Meta Shortcodes <= 0.5 - Contributor+ Unauthorized Arbitrary User Metadata AccessEPSS 0.8%CVE-2023-3392—Read More & Accordion < 3.2.7 - Admin+ PHP Object InjectionEPSS 0.8%CVE-2021-24733—WP Post Page Clone < 1.2 - Unauthorised Post AccessEPSS 0.8%CVE-2021-24819—Page/Post Content Shortcode <= 1.0 - Contributor+ Arbitrary Posts/Pages AccessEPSS 0.8%CVE-2023-6113HIGHWP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup DownloadEPSS 0.8%CVE-2021-24960—WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVGEPSS 0.8%CVE-2021-24961—WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via ShortcodeEPSS 0.8%CVE-2022-1687—Logo Slider <= 1.4.8 - Admin+ SQLiEPSS 0.8%CVE-2022-1690—Note Press <= 0.1.10 - Admin+ SQLi via Bulk ActionsEPSS 0.8%CVE-2022-1686—Five Minute Webshop <= 1.3.2 - Admin+ SQLi via idEPSS 0.8%CVE-2022-1689—Note Press <= 0.1.10 - Admin+ SQLi via UpdateEPSS 0.8%CVE-2022-1684—Cube Slider <= 1.2 - Admin+ SQLiEPSS 0.8%CVE-2022-1688—Note Press <= 0.1.10 - Admin+ SQLi via idEPSS 0.8%CVE-2022-2092—WooCommerce PDF Invoices & Packing Slips < 2.16.0 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2023-0772MEDIUMPopup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content DisclosureEPSS 0.8%CVE-2021-24883—Popup Anything < 2.0.4 - Contributor+ Stored Cross-Site ScriptingEPSS 0.8%