C
Vendor security profile
codepeople
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
2
6
CVE KEV
CVE severity distribution
11toplam CVE
High7 (64%)
Medium4 (36%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
8.5
CVE-2026-109901
WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability
C
Patch status unknown
6.5
CVE-2026-94590
WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-95598
WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
6.1
CVE-2026-103909
Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation
C
Patch status unknownEPSS %0
4.7
CVE-2026-100184
Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value
C
Patch status unknownEPSS %0
7.2
CVE-2026-96573
Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer
C
Patch status unknownEPSS %0
6.1
CVE-2026-100179
Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()
C
Patch status unknownEPSS %0
7.2
CVE-2026-93624
WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-95529
WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-78283
WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0