W
Vendor security profile
webkul
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs31
Critical0
CISA KEV0
Public exploit24
Patch rate%55
Avg. CVSS5.6
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
15
12
2
CVE KEV
CVE severity distribution
31toplam CVE
High6 (19%)
Medium25 (81%)
Patch and exploitation view
%55
Verified patch
%0
CISA KEV
%77
Public exploit
17Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
5.3
CVE-2026-107702
QloApps through 1.7.0 Authorization Bypass via id_hotel in Admin Room Booking
W
Patch verifiedEPSS %0
5.3
CVE-2026-105836
QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRooms
W
Patch verifiedEPSS %0
5.1
CVE-2026-103590
QloApps through 1.7.0 Reflected XSS via Length of Stay Fields
W
Patch verifiedEPSS %0
5.1
CVE-2026-103589
QloApps through 1.7.0 Reflected XSS via Room Type Editor
W
Patch verifiedEPSS %0
5.1
CVE-2026-103588
QloApps through 1.7.0 Reflected XSS via exceptions field
W
Patch verifiedEPSS %0
5.1
CVE-2026-103587
QloApps through 1.7.0 Reflected XSS via Book Now Search Parameters
W
Patch verifiedEPSS %0
5.1
CVE-2026-101139
Webkul Bagisto Invoice Mass Status Update state authorization
W
Patch verifiedEPSS %0
5.1
CVE-2026-97062
Aureus ERP 1.6.0 Stored XSS via SVG File Upload
W
Patch verifiedEPSS %0
8.6
CVE-2026-95655
Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel
W
Patch verifiedEPSS %0
5.1
CVE-2026-94387
Aureus ERP before 1.6.0 Stored XSS via Chatter Field-Change Log
W
Patch verifiedEPSS %0