N
Vendor security profile
Nexcess
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs19
Critical2
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
10
7
2
CVE KEV
CVE severity distribution
19toplam CVE
Critical2 (11%)
High8 (42%)
Medium9 (47%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
19Unknown
Latest vulnerabilities
7.1
CVE-2026-104672
WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
N
Patch status unknownEPSS %0
8.1
CVE-2026-104405
WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability
N
Patch status unknownEPSS %0
5.4
CVE-2026-97285
WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability
N
Patch status unknownEPSS %0
6.5
CVE-2026-97266
WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability
N
Patch status unknownEPSS %0
5.3
CVE-2026-97066
WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
N
Patch status unknownEPSS %0
6.5
CVE-2026-96834
WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
N
Patch status unknownEPSS %0
7.1
CVE-2026-96830
WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability
N
Patch status unknownEPSS %0
7.2
CVE-2026-94677
WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability
N
Patch status unknownEPSS %0
7.1
CVE-2026-93526
WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability
N
Patch status unknownEPSS %0
9.8
CVE-2026-78265
WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability
N
Patch status unknownEPSS %1