W
Vendor security profile
wpdevelop
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS5.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
4
2
CVE KEV
CVE severity distribution
6toplam CVE
High1 (17%)
Medium4 (67%)
Low1 (17%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
5.3
CVE-2026-3717
CV Builder – Professional Resume Builder SaaS <= 1.3.1 - Missing Authorization to Unauthenticated PNG File Upload
B
Patch status unknownEPSS %0
5.3
CVE-2026-18496
Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action
W
Patch status unknownEPSS %0
3.7
CVE-2026-39601
WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability
W
Patch status unknownEPSS %0
6.5
CVE-2026-102394
WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
W
Patch status unknownEPSS %0
6.1
CVE-2026-93655
Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter
W
Patch status unknownEPSS %0
6.1
CVE-2026-92561
Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter
W
Patch status unknownEPSS %0
7.2
CVE-2026-92619
Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter
W
Patch status unknownEPSS %1
5.3
CVE-2026-74002
WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability
W
Patch status unknownEPSS %0
5.3
CVE-2026-81777
WordPress Essential Addons for Elementor plugin <= 6.8.0 - Bypass vulnerability vulnerability
W
Patch status unknownEPSS %0
7.1
CVE-2026-66667
WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability
W
Patch status unknownEPSS %0