Vulnerabilities in Nexcess
18 resultsVexday analysis
Nexcess registra 5 vulnerabilidades na base Vexday, todas publicadas nos últimos 90 dias, indicando exposição recente. Nenhuma está sob ataque ativo (KEV) e não há críticas de severidade máxima, mas a dominância de CWE-79 (Cross-site Scripting) sinaliza fraqueza em validação de entrada. O volume concentrado em janela curta recomenda priorização para análise de impacto nos ambientes que utilizam este fornecedor.
CVE-2026-73997HIGHWordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerabilityEPSS 0.4%CVE-2026-57705HIGHWordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-28005CRITICALWordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-78265CRITICALWordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-57661MEDIUMWordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-73352MEDIUMWordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-65473MEDIUMWordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-73349MEDIUMWordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-73348MEDIUMWordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-66696MEDIUMWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-65567MEDIUMWordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-73357MEDIUMWordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66690HIGHWordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-78263HIGHWordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-65441HIGHWordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-65464MEDIUMWordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-42750MEDIUMWordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-84767MEDIUMWordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerabilityEPSS 0.1%