Vulnerabilities in Nexcess
10 resultsVexday analysis
Nexcess registra 5 vulnerabilidades na base Vexday, todas publicadas nos últimos 90 dias, indicando exposição recente. Nenhuma está sob ataque ativo (KEV) e não há críticas de severidade máxima, mas a dominância de CWE-79 (Cross-site Scripting) sinaliza fraqueza em validação de entrada. O volume concentrado em janela curta recomenda priorização para análise de impacto nos ambientes que utilizam este fornecedor.
CVE-2026-28005CRITICALWordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-57705HIGHWordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57661MEDIUMWordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-66696MEDIUMWordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2026-65567MEDIUMWordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-65473MEDIUMWordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66690HIGHWordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65441HIGHWordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-42750MEDIUMWordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-65464MEDIUMWordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%