K
Vendor security profile
Kit
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit0
Patch rate%13
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
7
0
1
CVE KEV
CVE severity distribution
8toplam CVE
High3 (38%)
Medium5 (63%)
Patch and exploitation view
%13
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
7Unknown
Latest vulnerabilities
8.1
CVE-2026-104909
Mang Board <= 2.4.3 - Unauthenticated Local File Inclusion via '<mode>_type' Parameter
KP
Patch status unknown
7.2
CVE-2026-107751
Mang Board <= 2.4.3 - Unauthenticated Stored Cross-Site Scripting via 'user_name' Parameter
KP
Patch status unknown
6.4
CVE-2026-104761
Mang Board <= 2.4.3 - Authenticated (Custom+) Stored Cross-Site Scripting via 'content' Parameter
KP
Patch status unknown
6.4
CVE-2026-103425
Booking Package <= 1.7.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
M
Patch status unknown
7.5
CVE-2026-103423
Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'
M
Patch status unknown
6.5
CVE-2026-96653
WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)
W
Patch status unknownEPSS %0
7.2
CVE-2026-100147
FunnelKit <= 3.16.0.5 - Unauthenticated Stored Cross-Site Scripting via Order Fields (shipping/billing)
T
Patch status unknownEPSS %0
2.3
CVE-2026-104634
beam_mcp: JSON boolean and null tool arguments reach dispatch as strings
S
Patch verifiedEPSS %0
5.3
CVE-2026-88257
beam_mcp: nested tool argument constraints advertised but not enforced
S
Patch verifiedEPSS %0
5.3
CVE-2026-105421
WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability
K
Patch status unknownEPSS %0