S
Vendor security profile
sim
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical2
CISA KEV0
Public exploit3
Patch rate%75
Avg. CVSS7.8
12-month vulnerability rate
0
1
0
0
0
0
0
0
0
0
1
0
CVE KEV
CVE severity distribution
4toplam CVE
Critical2 (50%)
Medium2 (50%)
Patch and exploitation view
%75
Verified patch
%0
CISA KEV
%75
Public exploit
3Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
8.7
CVE-2026-71542
GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php
G
Patch status unknownEPSS %0
7.1
CVE-2026-71426
GetSimple CMS: Authenticated Stored Local File Inclusion (LFI) via page "template" field
G
Patch status unknownEPSS %0
8.8
CVE-2026-70650
GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content
G
Patch status unknownEPSS %0
9.6
CVE-2026-56662
GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request
G
Patch status unknownEPSS %0
7.5
CVE-2026-56661
GetSimple CMS: Server-Side Request Forgery in the UpdateCE update endpoint
G
Patch status unknownEPSS %0
9.1
CVE-2026-56660
GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction
G
Patch status unknownEPSS %1
9.1
CVE-2026-53953
GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover
G
Patch status unknownEPSS %0
6.5
CVE-2026-96829
WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability
P
Patch status unknownEPSS %0
9.2
CVE-2026-102828
simple-git unsafe-operation guard does not block trailer command configuration
S
Patch verifiedEPSS %0
8.1
CVE-2026-102827
simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
S
Patch verifiedEPSS %0