Vulnerabilidades en unknown
4228 resultadosCVE-2025-4190HIGHCSV Mass Importer <= 1.2 - Admin+ Arbitrary File UploadEPSS 0.5%CVE-2024-5032MEDIUMSULly < 4.3.1 - Reflected XSSEPSS 0.5%CVE-2022-3343LOWWPQA < 5.9.3 - Missing validation lead to functionality abuseEPSS 0.5%CVE-2025-15030CRITICALUser Profile Builder < 3.15.2 - Unauthenticated Arbitrary Password ResetEPSS 0.5%CVE-2023-4836MEDIUMWordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOREPSS 0.5%CVE-2021-24570—Paypal Donation < 1.3.1 - CSRF to Stored Cross-Site ScriptingEPSS 0.5%CVE-2022-0279—AnyComment < 0.2.18 - Comment Rating Increase/Decrease via Race ConditionEPSS 0.5%CVE-2022-0833—Church Admin < 3.4.135 - Unauthenticated Plugin's Backup DisclosureEPSS 0.5%CVE-2021-25044—Cryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2023-2472MEDIUMNewsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSSEPSS 0.5%CVE-2022-4369MEDIUMWP-Lister Lite for Amazon < 2.4.4 - Reflected XSSEPSS 0.5%CVE-2022-3209—Soledad < 8.2.5 - Reflected Cross-site ScriptingEPSS 0.5%CVE-2022-3440MEDIUMRock Convert < 2.6.0 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2023-0442MEDIUMLoan Comparison < 1.5.2 - Reflected XSS via shortcodeEPSS 0.5%CVE-2023-2398—Icegram Engage < 3.1.12 - Reflected XSSEPSS 0.5%CVE-2022-4385—Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order UpdateEPSS 0.5%CVE-2022-2450MEDIUMreSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX CallsEPSS 0.5%CVE-2022-2094MEDIUMYellow Yard Searchbar < 2.8.2 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2022-4267MEDIUMBulk Delete Users by Email <= 1.2 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2023-2743MEDIUMWP ERP < 1.12.4 - Reflected Cross-Site ScriptingEPSS 0.5%