NE
Vendor
Nexcess
27
CVEs
0
On KEV
8
New 30D
Products
GI8.1
GiveWP
Nexcess
12 CVEs0 on KEV5 new
KW9.8
Kadence WooCommerce Email Designer
Nexcess
2 CVEs0 on KEV1 new
TE9.8
The Events Calendar
Nexcess
2 CVEs0 on KEV1 new
VT6.5
Virtue/Ascend/Pinnacle Toolkit
Nexcess
2 CVEs0 on KEV1 new
ET7.5
Event Tickets
Nexcess
4 CVEs0 on KEV0 new
WP6.5
WPComplete
Nexcess
2 CVEs0 on KEV0 new
BO5.3
BookIt
Nexcess
1 CVEs0 on KEV0 new
GB4.3
Gutenberg Blocks by Kadence Blocks
Nexcess
1 CVEs0 on KEV0 new
ST7.5
Starter Templates by Kadence WP
Nexcess
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104672 | GI GiveWP Nexcess | 7.1 | Oct 6 | WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-104405 | GI GiveWP Nexcess | 8.1 | Oct 6 | WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability |
| CVE-2026-97285 | TE The Events Calendar Nexcess | 5.4 | Sep 30 | WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability |
| CVE-2026-97266 | VT Virtue/Ascend/Pinnacle Toolkit Nexcess | 6.5 | Sep 30 | WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-97066 | GI GiveWP Nexcess | 5.3 | Sep 30 | WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-96834 | GI GiveWP Nexcess | 6.5 | Sep 30 | WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability |
| CVE-2026-96830 | GI GiveWP Nexcess | 7.1 | Sep 30 | WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94677 | KW Kadence WooCommerce Email Designer Nexcess | 7.2 | Sep 30 | WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability |
| CVE-2026-93526 | ET Event Tickets Nexcess | 7.1 | Sep 23 | WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-84767 | BO BookIt Nexcess | 5.3 | Sep 3 | WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability |
| CVE-2026-78265 | TE The Events Calendar Nexcess | 9.8 | Aug 24 | WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability |
| CVE-2026-78263 | ET Event Tickets Nexcess | 7.1 | Aug 24 | WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-73997 | ST Starter Templates by Kadence WP Nexcess | 7.5 | Aug 18 | WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability |
| CVE-2026-73352 | GI GiveWP Nexcess | 6.5 | Aug 18 | WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability |
| CVE-2026-73348 | GI GiveWP Nexcess | 6.5 | Aug 18 | WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability |
| CVE-2026-73357 | GI GiveWP Nexcess | 6.5 | Aug 13 | WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-73349 | GI GiveWP Nexcess | 5.3 | Aug 13 | WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability |
| CVE-2026-66696 | GB Gutenberg Blocks by Kadence Blocks Nexcess | 4.3 | Aug 6 | WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability |
| CVE-2026-66690 | GI GiveWP Nexcess | 7.1 | Aug 6 | WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-28005 | KW Kadence WooCommerce Email Designer Nexcess | 9.8 | Aug 6 | WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability |
| CVE-2026-65441 | GI GiveWP Nexcess | 7.1 | Jul 27 | WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-65567 | ET Event Tickets Nexcess | 5.3 | Jul 27 | WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability |
| CVE-2026-65473 | VT Virtue/Ascend/Pinnacle Toolkit Nexcess | 6.5 | Jul 23 | WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-65464 | GI GiveWP Nexcess | 5.4 | Jul 23 | WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-57705 | ET Event Tickets Nexcess | 7.5 | Jul 13 | WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability |
| CVE-2026-57661 | WP WPComplete Nexcess | 5.4 | Jun 26 | WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability |
| CVE-2026-42750 | WP WPComplete Nexcess | 6.5 | May 27 | WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability |