S
Vendor security profile
sma
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs2
Critical0
CISA KEV0
Public exploit2
Patch rate%0
Avg. CVSS8.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
2toplam CVE
High2 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%100
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
6.9
CVE-2026-108897
Smart Media4U Technology SHAREit App WebView JS Bridge syncInvoke routine
SM
Patch status unknownEPSS %0
7.6
CVE-2026-45440
WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability
SI
Patch status unknownEPSS %0
8.7
CVE-2026-104084
SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
S
Patch verifiedEPSS %0
5.3
CVE-2026-104083
SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content
S
Patch verifiedEPSS %0
8.6
CVE-2026-104082
SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
S
Patch verifiedEPSS %1
6.5
CVE-2026-107803
ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter
P
Patch status unknownEPSS %0
9.2
CVE-2026-82531
Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache
S
Patch verifiedEPSS %1
7.2
CVE-2026-103348
WordPress WP Ultimate Exporter plugin <= 3.0 - PHP Object Injection vulnerability
SI
Patch status unknownEPSS %0
5.3
CVE-2026-103336
WordPress WP Ultimate CSV Importer plugin <= 9.1 - Sensitive Data Exposure vulnerability
SI
Patch status unknownEPSS %0
9.8
CVE-2026-18782
SQL Injection in Trex Digital Manufacturing's Trex MES
TD
Patch status unknownEPSS %0