Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Unknown — Vulnerabilities & Security Advisories 4769

Browse all 4769 CVE security advisories affecting Unknown. AI-powered Chinese analysis, POCs, and references for each vulnerability.

“Unknown” represents a broad category of unclassified or poorly documented software components, currently associated with 4,141 recorded CVEs. These vulnerabilities typically stem from legacy architectures or proprietary systems lacking transparent security audits. Common flaw classes include remote code execution, cross-site scripting, and privilege escalation, often resulting from inadequate input validation or hardcoded credentials. Due to the opaque nature of these products, detailed security characteristics are frequently absent, making risk assessment difficult for organizations. Major incidents involving “Unknown” entities often highlight systemic failures in patch management and vendor accountability. The sheer volume of vulnerabilities suggests widespread reliance on unsupported or obscure technologies within critical infrastructure. Addressing these risks requires rigorous inventory management and proactive threat hunting, as standard mitigation strategies may not apply to such undefined software ecosystems.

CVE IDTitleCVSSSeverityPublished
CVE-2024-0719 Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting — Tabs Shortcode and Widget 5.4 -2024-03-18
CVE-2024-0365 Fancy Product Designer < 6.1.5 - Admin+ SQL Injection — Fancy Product Designer 7.2 -2024-03-18
CVE-2024-0779 Enjoy Social Feed <= 6.2.2 - Unauthenticated Arbitrary Instagram Account Unlinking — Enjoy Social Feed plugin for WordPress website 4.3 -2024-03-18
CVE-2024-0780 Enjoy Social Feed <= 6.2.2 - Subscriber+ Plugin Database Reset — Enjoy Social Feed plugin for WordPress website 8.1 -2024-03-18
CVE-2024-1658 Grid Shortcodes < 1.1.1 - Contributor+ Stored XSS — Grid Shortcodes 5.4 -2024-03-18
CVE-2024-1333 Responsive Pricing Table < 5.1.11 - Author+ Stored XSS — Responsive Pricing Table 5.4 -2024-03-18
CVE-2024-1331 Team Members < 5.3.2 - Author+ Stored XSS — Team Members 5.4 -2024-03-18
CVE-2024-1487 Photos and Files Contest Gallery < 21.3.1 - Author+ Stored Cross Site Scripting — Photos and Files Contest Gallery 5.4AIMediumAI2024-03-11
CVE-2024-1279 Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure — Paid Memberships Pro 4.3AIMediumAI2024-03-11
CVE-2024-0561 Ultimate Posts Widget < 2.3.1 - Admin+ Stored XSS — Ultimate Posts Widget 4.8AIMediumAI2024-03-11
CVE-2024-1290 Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover — User Registration 8.8AIHighAI2024-03-11
CVE-2024-1068 404 Solution < 2.35.8 - Admin+ SQL Injection — 404 Solution 7.2AIHighAI2024-03-11
CVE-2023-7247 Login as User or Customer <= 3.8 - Admin Account Takeover — Login as User or Customer 8.8AIHighAI2024-03-11
CVE-2024-1273 Starbox < 3.5.0 - Contributor+ Stored XSS — Starbox 5.4AIMediumAI2024-03-11
CVE-2024-0559 Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS — Enhanced Text Widget 4.8AIMediumAI2024-03-11
CVE-2023-6444 Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure — Seriously Simple Podcasting 5.3AIMediumAI2024-03-11
CVE-2024-1316 Event Tickets and Registration < 5.8.1 - Contributor+ Arbitrary Events Access — Event Tickets and Registration 4.3AIMediumAI2024-03-04
CVE-2024-1319 Event Tickets Plus < 5.9.1 - Contributor+ Attendees Lists Disclosure — Events Tickets Plus 4.3AIMediumAI2024-03-04
CVE-2024-1106 Shariff Wrapper < 4.6.10 - Admin+ Stored XSS — Shariff Wrapper 4.8 -2024-02-27
CVE-2023-7165 JetBackup < 2.0.9.9 - Directory Listing Exposing Backups — JetBackup 5.3 -2024-02-27
CVE-2024-0855 Spiffy Calendar < 4.9.9 - Broken Access Control — Spiffy Calendar 3.5 -2024-02-27
CVE-2023-7115 PageLayer < 1.8.1 - Admin+ Stored XSS — Page Builder: Pagelayer 4.8 -2024-02-27
CVE-2023-7198 WPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes — WP Dashboard Notes 6.5 -2024-02-27
CVE-2023-6584 JobSearch WP Job Board < 2.3.4 - Authentication Bypass — WP JobSearch 8.2 -2024-02-27
CVE-2023-6585 JobSearch WP Job Board < 2.3.4 - Arbitrary File Upload to RCE — WP JobSearch 9.8 -2024-02-27
CVE-2023-7203 Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion — Smart Forms 3.5 -2024-02-27
CVE-2023-7167 Persian Fonts <= 1.6 - Admin+ Stored XSS — Persian Fonts 4.8 -2024-02-27
CVE-2023-7202 Fatal Error Notify < 1.5.3 - Subscriber+ Test Error Email Sending — Fatal Error Notify 4.3 -2024-02-27
CVE-2023-4826 Socialdriver < 2024 - Prototype Pollution to XSS — socialdriver 6.1 -2024-02-23
CVE-2023-6081 Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting in New Chart — chartjs 4.8 -2024-02-12

This page lists every published CVE security advisory associated with Unknown. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.