VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297779 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4074 | redhat_vex | Quran Live Multilanguage <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:28:33+00:00 | Vulnerability · Source |
| CVE-2026-4524 | redhat_vex | Authentication Bypass Using an Alternate Path or Channel in GitLab | known not affected: 1 | 2026-06-05T19:28:32+00:00 | Vulnerability · Source |
| CVE-2026-4919 | redhat_vex | IBM Guardium Data Protection is affected by multiple vulnerabilities | known not affected: 1 | 2026-06-05T19:28:31+00:00 | Vulnerability · Source |
| CVE-2026-4065 | redhat_vex | Smart Slider 3 <= 3.5.1.33 - Missing Authorization to Authenticated (Contributor+) Slider Data Read and Image Record Manipulation | known not affected: 1 | 2026-06-05T19:28:31+00:00 | Vulnerability · Source |
| CVE-2026-4128 | redhat_vex | TP Restore Categories And Taxonomies <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Taxonomy Deletion via 'tpmcattt_delete_term' AJAX Action | known not affected: 1 | 2026-06-05T19:28:31+00:00 | Vulnerability · Source |
| CVE-2026-4300 | redhat_vex | Robo Gallery <= 5.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via 'Loading Label' Setting | known not affected: 1 | 2026-06-05T19:28:30+00:00 | Vulnerability · Source |
| CVE-2026-4646 | redhat_vex | Insufficient input validation in GitHub plugin API causes denial of service | known not affected: 1 | 2026-06-05T19:28:30+00:00 | Vulnerability · Source |
| CVE-2026-4664 | redhat_vex | Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter | known not affected: 1 | 2026-06-05T19:28:29+00:00 | Vulnerability · Source |
| CVE-2026-4394 | redhat_vex | Gravity Forms <= 2.9.30 - Unauthenticated Stored Cross-Site Scripting via Credit Card 'Card Type' Sub-Field | known not affected: 1 | 2026-06-05T19:28:29+00:00 | Vulnerability · Source |
| CVE-2026-4080 | redhat_vex | Easy Cart <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:28:29+00:00 | Vulnerability · Source |
| CVE-2026-4871 | redhat_vex | Sports Club Management <= 1.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' Attribute | known not affected: 1 | 2026-06-05T19:28:28+00:00 | Vulnerability · Source |
| CVE-2026-4817 | redhat_vex | MasterStudy LMS <= 3.7.25 - Authenticated (Subscriber+) Time-based Blind SQL Injection via 'order' and 'orderby' Parameters | known not affected: 1 | 2026-06-05T19:28:28+00:00 | Vulnerability · Source |
| CVE-2026-4655 | redhat_vex | Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget | known not affected: 1 | 2026-06-05T19:28:28+00:00 | Vulnerability · Source |
| CVE-2026-4853 | redhat_vex | JetBackup <= 3.1.19.8 - Authenticated (Administrator+) Arbitrary Directory Deletion via Path Traversal in 'fileName' Parameter | known not affected: 1 | 2026-06-05T19:28:27+00:00 | Vulnerability · Source |
| CVE-2026-4071 | redhat_vex | BirdSeed <= 2.2.0 - Cross-Site Request Forgery via BirdSeed Token Change | known not affected: 1 | 2026-06-05T19:28:26+00:00 | Vulnerability · Source |
| CVE-2026-4341 | redhat_vex | Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter | known not affected: 1 | 2026-06-05T19:28:26+00:00 | Vulnerability · Source |
| CVE-2026-4332 | redhat_vex | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab | known not affected: 1 | 2026-06-05T19:28:26+00:00 | Vulnerability · Source |
| CVE-2026-4888 | redhat_vex | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending | known not affected: 1 | 2026-06-05T19:28:26+00:00 | Vulnerability · Source |
| CVE-2026-4125 | redhat_vex | WPMK Block <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:28:26+00:00 | Vulnerability · Source |
| CVE-2026-4390 | redhat_vex | TeamSpeak 3 Server Connection State Management process_resend_queue use after free | known not affected: 1 | 2026-06-05T19:28:24+00:00 | Vulnerability · Source |
| CVE-2026-4301 | redhat_vex | Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter | known not affected: 1 | 2026-06-05T19:28:23+00:00 | Vulnerability · Source |
| CVE-2026-4138 | redhat_vex | DX Unanswered Comments <= 1.7 - Cross-Site Request Forgery via Settings Update | known not affected: 1 | 2026-06-05T19:28:23+00:00 | Vulnerability · Source |
| CVE-2026-4336 | redhat_vex | Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content | known not affected: 1 | 2026-06-05T19:28:22+00:00 | Vulnerability · Source |
| CVE-2026-4785 | redhat_vex | LatePoint <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | known not affected: 1 | 2026-06-05T19:28:22+00:00 | Vulnerability · Source |
| CVE-2026-4479 | redhat_vex | WholeSale Products Dynamic Pricing Management WooCommerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings | known not affected: 1 | 2026-06-05T19:28:22+00:00 | Vulnerability · Source |
| CVE-2026-4929 | redhat_vex | Simple Hierarchical Select (Drupal 7) XSS in term-derived output | known not affected: 1 | 2026-06-05T19:28:21+00:00 | Vulnerability · Source |
| CVE-2026-4608 | redhat_vex | ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter | known not affected: 1 | 2026-06-05T19:28:21+00:00 | Vulnerability · Source |
| CVE-2026-4527 | redhat_vex | Cross-Site Request Forgery (CSRF) in GitLab | known not affected: 1 | 2026-06-05T19:28:21+00:00 | Vulnerability · Source |
| CVE-2026-4482 | redhat_vex | Insight Agent Private Key Information Disclosure via Inherited File Permissions | known not affected: 1 | 2026-06-05T19:28:20+00:00 | Vulnerability · Source |
| CVE-2026-4293 | redhat_vex | Kieback & Peter DDC Building Controllers Cross-site Scripting | known not affected: 1 | 2026-06-05T19:28:19+00:00 | Vulnerability · Source |
| CVE-2026-4059 | redhat_vex | ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:19+00:00 | Vulnerability · Source |
| CVE-2026-4859 | redhat_vex | SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute | known not affected: 1 | 2026-06-05T19:28:19+00:00 | Vulnerability · Source |
| CVE-2026-4635 | redhat_vex | Persistent notification timing attack causing server denial of service | known not affected: 1 | 2026-06-05T19:28:18+00:00 | Vulnerability · Source |
| CVE-2026-4141 | redhat_vex | Quran Translations <= 1.7 - Cross-Site Request Forgery to Playlist Settings Form | known not affected: 1 | 2026-06-05T19:28:18+00:00 | Vulnerability · Source |
| CVE-2026-4914 | redhat_vex | CVE-2026-4914 | known not affected: 1 | 2026-06-05T19:28:18+00:00 | Vulnerability · Source |
| CVE-2026-4303 | redhat_vex | WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:15+00:00 | Vulnerability · Source |
| CVE-2026-4420 | redhat_vex | Stored XSS via Page Creating functionality in Bludit | known not affected: 1 | 2026-06-05T19:28:12+00:00 | Vulnerability · Source |
| CVE-2026-4330 | redhat_vex | Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter | known not affected: 1 | 2026-06-05T19:28:09+00:00 | Vulnerability · Source |
| CVE-2026-4109 | redhat_vex | Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure | known not affected: 1 | 2026-06-05T19:28:09+00:00 | Vulnerability · Source |
| CVE-2026-4949 | redhat_vex | ProfilePress <= 4.16.12 - Missing Authorization to Authenticated (Subscriber+) Inactive Membership Plan Subscription | known not affected: 1 | 2026-06-05T19:28:09+00:00 | Vulnerability · Source |
| CVE-2026-4406 | redhat_vex | Gravity Forms <= 2.9.30 - Reflected Cross-Site Scripting via 'form_ids' Parameter | known not affected: 1 | 2026-06-05T19:28:07+00:00 | Vulnerability · Source |
| CVE-2026-4901 | redhat_vex | Insertion of Sesitive Information into Log File in Hydrosystem Control System | known not affected: 1 | 2026-06-05T19:28:07+00:00 | Vulnerability · Source |
| CVE-2026-4082 | redhat_vex | ER Swiffy Insert <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:28:07+00:00 | Vulnerability · Source |
| CVE-2026-4055 | redhat_vex | Insufficient permission validation on cross-team playbook run creation | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4811 | redhat_vex | WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4730 | redhat_vex | Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'chartid' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4019 | redhat_vex | Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4334 | redhat_vex | Shariff Wrapper <= 4.6.20 - Authenticated (Contributor+) Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:28:04+00:00 | Vulnerability · Source |
| CVE-2026-4091 | redhat_vex | OPEN-BRAIN <= 0.5.0 - Cross-Site Request Forgery | known not affected: 1 | 2026-06-05T19:28:03+00:00 | Vulnerability · Source |
| CVE-2026-4073 | redhat_vex | pdfl.io <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:01+00:00 | Vulnerability · Source |