C
Vendor security profile
codepeople
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
2
5
CVE KEV
CVE severity distribution
10toplam CVE
High6 (60%)
Medium4 (40%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
6.5
CVE-2026-94590
WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-95598
WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
6.1
CVE-2026-103909
Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation
C
Patch status unknownEPSS %0
4.7
CVE-2026-100184
Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value
C
Patch status unknownEPSS %0
7.2
CVE-2026-96573
Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer
C
Patch status unknownEPSS %0
6.1
CVE-2026-100179
Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()
C
Patch status unknownEPSS %0
7.2
CVE-2026-93624
WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-95529
WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-78283
WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0
7.1
CVE-2026-78281
WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
C
Patch status unknownEPSS %0