M
Vendor security profile
mit
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit2
Patch rate%100
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
0
2
0
0
0
0
0
2
CVE KEV
CVE severity distribution
4toplam CVE
High3 (75%)
Medium1 (25%)
Patch and exploitation view
%100
Verified patch
%0
CISA KEV
%50
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
0Unknown
Latest vulnerabilities
5.3
CVE-2026-108731
Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Only Bypass
T
Patch status unknown
5.3
CVE-2026-108730
Raven 2.0.0 through 3.0.0 Missing Authorization via Legacy Message and File APIs
T
Patch status unknown
7.3
CVE-2026-62118
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Broken Access Control vulnerability
DV
Patch status unknownEPSS %0
8.5
CVE-2026-62117
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - SQL Injection vulnerability
DV
Patch status unknownEPSS %0
7.1
CVE-2026-62116
WordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability
DV
Patch status unknownEPSS %0
7.1
CVE-2026-94668
WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability
DG
Patch status unknownEPSS %0
7.1
CVE-2026-107778
MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred()
M
Patch verifiedEPSS %0
6.9
CVE-2026-107708
MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC
M
Patch verifiedEPSS %1
8.8
CVE-2026-95534
WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability
UE
Patch status unknownEPSS %0
7.1
CVE-2026-94662
WordPress Unlimited Elements For Elementor plugin <= 2.0.19 - Cross Site Scripting (XSS) vulnerability
UE
Patch status unknownEPSS %0