W
Vendor security profile
wedevs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs19
Critical2
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
0
0
1
1
6
6
5
CVE KEV
CVE severity distribution
19toplam CVE
Critical2 (11%)
High9 (47%)
Medium8 (42%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
19Unknown
Latest vulnerabilities
6.4
CVE-2026-96574
User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter
W
Patch status unknownEPSS %0
6.5
CVE-2026-104393
WordPress Happy Addons for Elementor plugin <= 3.50.0 - Cross Site Scripting (XSS) vulnerability
W
Patch status unknownEPSS %0
7.1
CVE-2026-39750
WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
W
Patch status unknownEPSS %0
7.1
CVE-2026-32572
WordPress WP User Frontend Pro plugin <= 4.2.13 - Cross Site Scripting (XSS) vulnerability
W
Patch status unknownEPSS %0
6.3
CVE-2026-97281
WordPress WP Project Manager plugin <= 4.0.7 - Broken Access Control vulnerability
W
Patch status unknownEPSS %0
7.6
CVE-2026-96346
WordPress WP ERP plugin <= 1.17.9 - SQL Injection vulnerability
W
Patch status unknownEPSS %0
7.2
CVE-2026-96343
WordPress WP ERP plugin <= 1.17.9 - PHP Object Injection vulnerability
W
Patch status unknownEPSS %0
6.5
CVE-2026-95525
WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability
W
Patch status unknownEPSS %0
5.3
CVE-2026-95524
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
W
Patch status unknownEPSS %0
6.5
CVE-2026-95523
WordPress WP User Frontend plugin <= 4.3.11 - Bypass Vulnerability vulnerability
W
Patch status unknownEPSS %0