Log in Start free

Nexcess

Products

ProductCVEsExploitedLatest
GiveWP13–Oct 30, 2026
Event Tickets4–Sep 23, 2026
WPComplete2–Jun 26, 2026
Kadence WooCommerce Email Designer2–Sep 30, 2026
The Events Calendar2–Sep 30, 2026
Virtue/Ascend/Pinnacle Toolkit2–Sep 30, 2026
Gutenberg Blocks by Kadence Blocks1–Aug 6, 2026
BookIt1–Sep 3, 2026
Starter Templates by Kadence WP1–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-116853 Medium 6.5 WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-104672 High 7.1 WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-104405 High 8.1 WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-97285 Medium 5.4 WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-97266 Medium 6.5 WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-97066 Medium 5.3 WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-96834 Medium 6.5 WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-96830 High 7.1 WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-94677 High 7.2 WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-93526 High 7.1 WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-84767 Medium 5.3 WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability 0.2%
  • CVE-2026-78265 Critical 9.8 WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability 0.6%
  • CVE-2026-78263 High 7.1 WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-73997 High 7.5 WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability 0.5%
  • CVE-2026-73352 Medium 6.5 WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-73348 Medium 6.5 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-73357 Medium 6.5 WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-73349 Medium 5.3 WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-66696 Medium 4.3 WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-66690 High 7.1 WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-28005 Critical 9.8 WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability 0.5%
  • CVE-2026-65441 High 7.1 WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-65567 Medium 5.3 WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-65473 Medium 6.5 WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-65464 Medium 5.4 WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-57705 High 7.5 WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57661 Medium 5.4 WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-42750 Medium 6.5 WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability 0.1%