P
Vendor security profile
properfraction
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
3
1
4
CVE KEV
CVE severity distribution
8toplam CVE
High2 (25%)
Medium6 (75%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
6.5
CVE-2026-96337
WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
P
Patch status unknownEPSS %0
5.9
CVE-2026-96518
WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability
P
Patch status unknownEPSS %0
6.1
CVE-2026-92551
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Reflected Cross-Site Scripting via ppress_billing_address Filename Parameter
P
Patch status unknownEPSS %0
8.8
CVE-2026-92536
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Information Exposure via Shortcode Injection via Nickname and Biographical Info Profile Fields
P
Patch status unknownEPSS %1
8.1
CVE-2026-85658
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'eup_bio' Biography Field (Entity-Encoded Shortcode Bracket)
P
Patch status unknownEPSS %1
5.3
CVE-2026-3424
kk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution via 'payload' Parameter
P
Patch status unknownEPSS %1
5.4
CVE-2026-18385
Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.19 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Name Profile Field
P
Patch status unknownEPSS %1
6.5
CVE-2026-66703
WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability
P
Patch status unknownEPSS %0