Vulnerabilidades em unknown

4.777 resultados
Análise Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2024-1310MEDIUMWooCommerce < 8.6 - Contributor+ Private/Draft Products AccessEPSS 0.7%CVE-2021-24196—Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.7%CVE-2022-2407—WP phpMyAdmin < 5.2.0.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2023-0467MEDIUMWP Dark Mode < 4.0.8 - Subscriber+ Local File InclusionEPSS 0.7%CVE-2024-3231MEDIUMPopup4Phone <= 1.3.2 - Unauthenticated Stored XSSEPSS 0.7%CVE-2021-24888—ImageBoss < 3.0.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-3739MEDIUMWP Best Quiz <= 1.0 - Author+ Stored XSSEPSS 0.7%CVE-2015-20106—ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24574—Simple Banner < 2.10.4 - Authenticated Stored XSSEPSS 0.7%CVE-2023-5082HIGHHistory Log by click5 < 1.0.13 - Admin+ Time-Based Blind SQL InjectionEPSS 0.7%CVE-2021-24346—Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting (XSS)EPSS 0.7%CVE-2022-0775MEDIUMWooCommerce < 6.2.1 - Subscriber+ Arbitrary Comment DeletionEPSS 0.7%CVE-2024-5630HIGHInsert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File UploadEPSS 0.7%CVE-2021-24558—Project Status <= 1.6 - Reflected Cross-Site Scripting (XSS)EPSS 0.7%CVE-2022-1512—ScrollReveal.js Effects <= 1.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-25061—WP Booking System – Booking Calendar < 2.0.15 - Authenticated Reflected Cross-Site Scripting (XSS)EPSS 0.7%CVE-2024-10709MEDIUMYaDisk Files <= 1.2.5 - Contributor+ Stored XSS via ShortcodeEPSS 0.7%CVE-2021-24561—WP SMS < 5.4.13 - Authenticated Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-4417MEDIUMWP Cerber < 9.3.3 - User Enumeration Bypass via Rest APIEPSS 0.7%CVE-2021-24633—Countdown Block < 1.1.2 - Missing Authorisation in AJAX actionEPSS 0.7%