M
Vendor security profile
Muffingroup
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
0
1
CVE KEV
CVE severity distribution
4toplam CVE
Critical1 (25%)
High1 (25%)
Medium2 (50%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
7.1
CVE-2026-94415
WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability
M
Patch status unknownEPSS %0
6.4
CVE-2026-6178
Betheme <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode
M
Patch status unknownEPSS %0
9.9
CVE-2026-65548
WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability
M
Patch status unknownEPSS %1
6.4
CVE-2024-5647
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
B
Patch status unknownEPSS %0