U
Vendor security profile
Unknown
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1.211
Critical95
CISA KEV0
Public exploit233
Patch rate%0
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
9
541
437
222
CVE KEV
CVE severity distribution
1.211toplam CVE
Critical95 (8%)
High323 (27%)
Medium669 (55%)
Low124 (10%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%19
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
1.210Unknown
Latest vulnerabilities
5.3
CVE-2026-89271
WP-BusinessDirectory <= 4.0.2 - Unauthenticated Arbitrary File Write via uploadFile
U
Patch status unknownEPSS %0
6.8
CVE-2026-89269
WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode
U
Patch status unknownEPSS %0
6.5
CVE-2026-107791
WP Comment Cleaner 6.1 - 7.1 - Subscriber+ Bulk Comment Deletion via nav_delete_all_comment
U
Patch status unknownEPSS %0
3.5
CVE-2025-15703
WP Job Openings < 4.0.0 - Admin+ Stored XSS
U
Patch status unknownEPSS %0
4.3
CVE-2026-84166
Hotel Booking <= 3.8 - Booking Order Creation, Deletion, and Modification via CSRF
U
Patch status unknownEPSS %0
4.3
CVE-2026-84167
Hotel Booking <= 3.8 - Subscriber+ Booking Order PII Disclosure via IDOR
U
Patch status unknownEPSS %0
4.3
CVE-2026-97183
WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Handlers
U
Patch status unknownEPSS %0
8.8
CVE-2026-96227
Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload
U
Patch status unknownEPSS %0
4.3
CVE-2026-93550
Veeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_veeqo_connection_process
U
Patch status unknownEPSS %0
7.1
CVE-2026-91829
Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter
U
Patch status unknownEPSS %0