M
Vendor security profile1 actively exploited CVEs
Meta
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1
Critical1
CISA KEV1
Public exploit1
Patch rate%100
Avg. CVSS10.0
12-month vulnerability rate
0
1
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
1toplam CVE
Critical1 (100%)
Patch and exploitation view
%100
Verified patch
%100
CISA KEV
%100
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
8.5
CVE-2026-94663
WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability
M
Patch status unknownEPSS %0
7.8
CVE-2026-104026
Vulnerability in Meta Platforms, Inc Sapling SCM
MP
Patch status unknownEPSS %0
5.3
CVE-2026-62061
WordPress ProfileGrid plugin <= 6.0.0.2 - Insecure Direct Object References (IDOR) vulnerability
M
Patch status unknownEPSS %0
8.8
CVE-2026-92172
Vulnerability in Meta Platforms, Inc Meta Horizon OS
MP
Patch status unknownEPSS %0
9.1
CVE-2026-92173
Vulnerability in Meta Platforms, Inc Meta Horizon OS
MP
Patch status unknownEPSS %0
7.5
CVE-2026-84894
Use after free in Meta Platforms, Inc Moxygen
MP
Patch status unknownEPSS %0
5.1
CVE-2026-100373
OpenMetadata through 2.0.2 SSRF via Webhook URL Validation Bypass
O
Patch verifiedEPSS %0
6.5
CVE-2026-94461
WordPress Ditty plugin <= 3.1.69 - Cross Site Scripting (XSS) vulnerability
M
Patch status unknownEPSS %0
9.8
CVE-2026-13355
Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter
MB
Patch status unknownEPSS %0
5.1
CVE-2026-93339
Ditty < 3.1.70 Stored XSS via Layout Tag Wrapper Attribute
MC
Patch verifiedEPSS %0