Vulnerabilidades em unknown

4.777 resultados
Análise Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2023-5922HIGHRoyal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post ReadEPSS 0.7%CVE-2024-1588MEDIUMSendPress Newsletters <= 1.23.11.6 - Admin+ Stored XSS via SettingsEPSS 0.7%CVE-2023-5672—WP Mail Log < 1.1.3 – Contributor+ LFI in wml_logs/send_mail endpointEPSS 0.7%CVE-2022-4471MEDIUMYARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSSEPSS 0.7%CVE-2026-9271MEDIUMKeepInMind - Dashboard Notes < 0.8.4.2 - Contributor+ Stored XSSEPSS 0.7%CVE-2022-4682MEDIUMLightbox Gallery < 0.9.5 - Contributor+ Stored XSS via ShortcodeEPSS 0.7%CVE-2022-4759MEDIUMGigPress < 2.3.28 - Contributor+ Stored XSS via ShortcodeEPSS 0.7%CVE-2022-4488MEDIUMWidgets on Pages < 1.8.0 - Contributor+ Stored XSSEPSS 0.7%CVE-2021-24794—Connections Business Directory < 10.4.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-4109LOWWholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log DownloadEPSS 0.7%CVE-2022-4303HIGHWP Limit Login Attempts <= 2.6.4 - IP SpoofingEPSS 0.7%CVE-2021-24809—BP Better Messages < 1.9.9.41 - Multiple CSRFEPSS 0.7%CVE-2022-1094MEDIUMAmr Users < 4.59.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-1093—WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbsEPSS 0.7%CVE-2022-1255—Import and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2024-7354MEDIUMNinja Forms 3.8.6-3.8.10 - Reflected XSSEPSS 0.7%CVE-2023-1405HIGHFormidable Forms < 6.2 - Unauthenticated PHP Object InjectionEPSS 0.7%CVE-2023-3154HIGHNextGEN Gallery < 3.39 - Admin+ PHAR DeserializationEPSS 0.7%CVE-2026-8386MEDIUMWP Go Maps < 10.0.10 - Unauthenticated Sensitive Information Disclosure via Marker IDEPSS 0.7%CVE-2022-1938—Awin Data Feed < 1.8 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.7%