Vulnerabilidades em unknown

4.789 resultados
Análise Vexday

O fornecedor acumula 13 vulnerabilidades na base, das quais 2 são críticas (CVSS ≥ 9.0), mas nenhuma está sob ataque ativo no momento. A fraqueza dominante é CWE-121 (stack-based buffer overflow), um vetor clássico de exploração com potencial elevado. A ausência de publicações recentes nos últimos 90 dias sugere risco estabilizado, porém a presença de críticas demanda atenção continuada ao aplicar patches.

CVE-2022-2083—Simple Single Sign On <= 4.1.0 - Authentication BypassEPSS 0.6%CVE-2024-0365MEDIUMFancy Product Designer < 6.1.5 - Admin+ SQL InjectionEPSS 0.6%CVE-2022-1990—Nested Pages < 3.1.21 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-1010—Login using WordPress Users < 1.13.4 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2022-2099—WooCommerce < 6.6.0 - Admin+ Stored HTML InjectionEPSS 0.6%CVE-2024-12274HIGHBookingPress < 1.1.23 - Unauthenticated Export File DownloadEPSS 0.6%CVE-2026-1540HIGHSpam Protect for Contact Form 7 < 1.2.10 - Editor+ Remote Code ExecutionEPSS 0.6%CVE-2022-2877—Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP SpoofingEPSS 0.6%CVE-2021-24516—PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2023-4297MEDIUMMmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory ListingEPSS 0.6%CVE-2023-7247MEDIUMLogin as User or Customer <= 3.8 - Admin Account TakeoverEPSS 0.6%CVE-2021-24635—Visual Link Preview < 2.2.3 - Unauthorised AJAX CallsEPSS 0.6%CVE-2024-2505HIGHGamiPress < 6.8.9 - Broken Access ControlEPSS 0.6%CVE-2022-0914—Export All URLs < 4.3 - Private/Draft Post/Page Title Disclosure via CSRFEPSS 0.6%CVE-2023-0061MEDIUMJudge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSSEPSS 0.6%CVE-2022-3132—Goolytics - Simple Google Analytics < 1.1.2 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2023-0075MEDIUMAmazon JS <= 0.10 - Contributor+ Stored XSSEPSS 0.6%CVE-2023-2029—PrePost SEO <= 3.0 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-25059MEDIUMDownload Plugin < 2.0.0 - Subscriber+ Website DownloadEPSS 0.6%CVE-2021-24421—WP JobSearch < 1.7.4 - Authenticated Stored XSSEPSS 0.6%