K
Vendor security profile
kan
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs62
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
62toplam CVE
Uncertain62 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
62Unknown
Latest vulnerabilities
4.3
CVE-2026-89280Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dokan/v1/customers/{id}
VendordokanincProductDokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy
D
Patch status unknownEPSS %0
4.3
CVE-2026-103028SFTPGo source-side file-pattern filter bypass during copy operations
Patch status unknownEPSS %0
6.5
CVE-2026-77375SFTPGo: Denial of service via malformed SSH channel request
Patch status unknownEPSS %0
7.5
5.3
CVE-2026-92802kan through 0.6.0 Authorization Bypass via GitHub Project Import
Patch status unknownEPSS %0
4.3
CVE-2026-10630WP Courses LMS <= 3.2.29 - Insecure Direct Object Reference to Authenticated (Custom+) Sensitive Information Disclosure via 'resultID' Parameter
VendorhookandhookProductWP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses
H
Patch status unknownEPSS %0
5.9