A
Vendor security profile1 actively exploited CVEs
AMI
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical0
CISA KEV1
Public exploit1
Patch rate%0
Avg. CVSS7.6
12-month vulnerability rate
0
1
0
0
0
0
0
0
0
0
0
5
CVE KEV
CVE severity distribution
11toplam CVE
High9 (82%)
Medium1 (9%)
Uncertain1 (9%)
Patch and exploitation view
%0
Verified patch
%9
CISA KEV
%9
Public exploit
0Patch available
0Partial
1Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
5.1
CVE-2026-110101
Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploads
B
Patch status unknown
5.8
CVE-2026-0893
Uncleared Password Keystrokes Vulnerability
A
Patch status unknown
8.3
CVE-2025-58774
UEFI OOB Write and Buffer Overflow Vulnerabilities
A
Patch status unknown
7.1
CVE-2025-58773
UEFI OOB Write and Buffer Overflow Vulnerabilities
A
Patch status unknown
8.2
CVE-2025-58772
UEFI OOB Write and Buffer Overflow Vulnerabilities
A
Patch status unknown
7.1
CVE-2025-58771
UEFI OOB Write and Buffer Overflow Vulnerabilities
A
Patch status unknown
5.3
CVE-2026-108691
mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList
G
Patch status unknownEPSS %0
5.3
CVE-2026-108690
mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdList
G
Patch status unknownEPSS %0
7.2
CVE-2026-62130
WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.8 - PHP Object Injection vulnerability
AH
Patch status unknownEPSS %0
7.1
CVE-2026-96553
WordPress FiboSearch plugin <= 1.34.1 - Cross Site Scripting (XSS) vulnerability
DG
Patch status unknownEPSS %0