U
Vendor security profile
Unknown
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1.204
Critical95
CISA KEV0
Public exploit232
Patch rate%0
Avg. CVSS6.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
9
541
437
216
CVE KEV
CVE severity distribution
1.204toplam CVE
Critical95 (8%)
High322 (27%)
Medium664 (55%)
Low123 (10%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%19
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
1.203Unknown
Latest vulnerabilities
4.3
CVE-2026-97183
WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Handlers
U
Patch status unknownEPSS %0
8.8
CVE-2026-96227
Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload
U
Patch status unknownEPSS %0
4.3
CVE-2026-93550
Veeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_veeqo_connection_process
U
Patch status unknownEPSS %0
7.1
CVE-2026-91829
Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter
U
Patch status unknownEPSS %0
6.5
CVE-2026-89305
Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter
U
Patch status unknownEPSS %0
6.5
CVE-2026-89304
Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank_transfer_completed_payment' Parameter
U
Patch status unknownEPSS %0
8.6
CVE-2026-89302
Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter
U
Patch status unknownEPSS %0
8.6
CVE-2026-89299
WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter
U
Patch status unknownEPSS %0
8.6
CVE-2026-89297
Loja Automática <= 1.0.0 - Unauthenticated SQLi via 'id' Parameter
U
Patch status unknownEPSS %0
8.6
CVE-2026-89287
ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter
U
Patch status unknownEPSS %0