Vulnerabilidades em unknown

4.777 resultados
Análise Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-0706—Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-25084—Advanced Cron Manager - Subscriber+ Arbitrary Events/Schedules Creation/DeletionEPSS 0.7%CVE-2021-24309—Weekly Schedule < 3.4.3 - Authenticated Stored XSSEPSS 0.7%CVE-2021-24734—Compact WP Audio Player < 1.9.7 - Contributor+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24412—Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24760—Gutenberg PDF Viewer Block < 1.0.1 - Contributor+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24413—Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2021-24732—Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site ScriptingEPSS 0.7%CVE-2022-4577MEDIUMEasy Testimonials < 3.9.3 - Contributor+ Stored XSSEPSS 0.6%CVE-2023-7201MEDIUMEverest Backup < 2.2.5 - Admin+ Arbitrary File UploadEPSS 0.6%CVE-2023-0174MEDIUMWP VR < 8.2.7 - Contributor+ Stored XSSEPSS 0.6%CVE-2022-4824MEDIUMWP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2023-0150MEDIUMCloak Front End Email < 1.9.2 - Contributor+ Stored XSSEPSS 0.6%CVE-2022-0426—Product Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site ScriptingEPSS 0.6%CVE-2022-4626MEDIUMPPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in ShortcodeEPSS 0.6%CVE-2022-4717MEDIUMStrong Testimonials < 3.0.3 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-2041—Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element ContentEPSS 0.6%CVE-2022-2040—Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URLEPSS 0.6%CVE-2022-0360—WP Ultimate CSV Importer < 6.4.3 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24920—StatCounter < 2.0.7 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%