VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
297859 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4125 | redhat_vex | WPMK Block <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:28:26+00:00 | Vulnerability · Source |
| CVE-2026-4390 | redhat_vex | TeamSpeak 3 Server Connection State Management process_resend_queue use after free | known not affected: 1 | 2026-06-05T19:28:24+00:00 | Vulnerability · Source |
| CVE-2026-4301 | redhat_vex | Rate Star Review Vote <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification via 'rating_id' Parameter | known not affected: 1 | 2026-06-05T19:28:23+00:00 | Vulnerability · Source |
| CVE-2026-4138 | redhat_vex | DX Unanswered Comments <= 1.7 - Cross-Site Request Forgery via Settings Update | known not affected: 1 | 2026-06-05T19:28:23+00:00 | Vulnerability · Source |
| CVE-2026-4336 | redhat_vex | Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content | known not affected: 1 | 2026-06-05T19:28:22+00:00 | Vulnerability · Source |
| CVE-2026-4785 | redhat_vex | LatePoint <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | known not affected: 1 | 2026-06-05T19:28:22+00:00 | Vulnerability · Source |
| CVE-2026-4479 | redhat_vex | WholeSale Products Dynamic Pricing Management WooCommerce <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings | known not affected: 1 | 2026-06-05T19:28:22+00:00 | Vulnerability · Source |
| CVE-2026-4929 | redhat_vex | Simple Hierarchical Select (Drupal 7) XSS in term-derived output | known not affected: 1 | 2026-06-05T19:28:21+00:00 | Vulnerability · Source |
| CVE-2026-4608 | redhat_vex | ProfileGrid <= 5.9.8.4 - Authenticated (Subscriber+) SQL Injection via 'rid' Parameter | known not affected: 1 | 2026-06-05T19:28:21+00:00 | Vulnerability · Source |
| CVE-2026-4527 | redhat_vex | Cross-Site Request Forgery (CSRF) in GitLab | known not affected: 1 | 2026-06-05T19:28:21+00:00 | Vulnerability · Source |
| CVE-2026-4482 | redhat_vex | Insight Agent Private Key Information Disclosure via Inherited File Permissions | known not affected: 1 | 2026-06-05T19:28:20+00:00 | Vulnerability · Source |
| CVE-2026-4293 | redhat_vex | Kieback & Peter DDC Building Controllers Cross-site Scripting | known not affected: 1 | 2026-06-05T19:28:19+00:00 | Vulnerability · Source |
| CVE-2026-4059 | redhat_vex | ShopLentor <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button_text' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:19+00:00 | Vulnerability · Source |
| CVE-2026-4859 | redhat_vex | SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute | known not affected: 1 | 2026-06-05T19:28:19+00:00 | Vulnerability · Source |
| CVE-2026-4635 | redhat_vex | Persistent notification timing attack causing server denial of service | known not affected: 1 | 2026-06-05T19:28:18+00:00 | Vulnerability · Source |
| CVE-2026-4141 | redhat_vex | Quran Translations <= 1.7 - Cross-Site Request Forgery to Playlist Settings Form | known not affected: 1 | 2026-06-05T19:28:18+00:00 | Vulnerability · Source |
| CVE-2026-4914 | redhat_vex | CVE-2026-4914 | known not affected: 1 | 2026-06-05T19:28:18+00:00 | Vulnerability · Source |
| CVE-2026-4303 | redhat_vex | WP Visitor Statistics (Real Time Traffic) <= 8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:15+00:00 | Vulnerability · Source |
| CVE-2026-4420 | redhat_vex | Stored XSS via Page Creating functionality in Bludit | known not affected: 1 | 2026-06-05T19:28:12+00:00 | Vulnerability · Source |
| CVE-2026-4330 | redhat_vex | Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter | known not affected: 1 | 2026-06-05T19:28:09+00:00 | Vulnerability · Source |
| CVE-2026-4109 | redhat_vex | Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure | known not affected: 1 | 2026-06-05T19:28:09+00:00 | Vulnerability · Source |
| CVE-2026-4949 | redhat_vex | ProfilePress <= 4.16.12 - Missing Authorization to Authenticated (Subscriber+) Inactive Membership Plan Subscription | known not affected: 1 | 2026-06-05T19:28:09+00:00 | Vulnerability · Source |
| CVE-2026-4406 | redhat_vex | Gravity Forms <= 2.9.30 - Reflected Cross-Site Scripting via 'form_ids' Parameter | known not affected: 1 | 2026-06-05T19:28:07+00:00 | Vulnerability · Source |
| CVE-2026-4901 | redhat_vex | Insertion of Sesitive Information into Log File in Hydrosystem Control System | known not affected: 1 | 2026-06-05T19:28:07+00:00 | Vulnerability · Source |
| CVE-2026-4082 | redhat_vex | ER Swiffy Insert <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:28:07+00:00 | Vulnerability · Source |
| CVE-2026-4055 | redhat_vex | Insufficient permission validation on cross-team playbook run creation | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4811 | redhat_vex | WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4730 | redhat_vex | Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'chartid' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4019 | redhat_vex | Complianz – GDPR/CCPA Cookie Consent <= 7.4.5 - Missing Authorization to Unauthenticated Private Post Content Disclosure via Consent Area REST Endpoint | known not affected: 1 | 2026-06-05T19:28:05+00:00 | Vulnerability · Source |
| CVE-2026-4334 | redhat_vex | Shariff Wrapper <= 4.6.20 - Authenticated (Contributor+) Cross-Site Scripting | known not affected: 1 | 2026-06-05T19:28:04+00:00 | Vulnerability · Source |
| CVE-2026-4091 | redhat_vex | OPEN-BRAIN <= 0.5.0 - Cross-Site Request Forgery | known not affected: 1 | 2026-06-05T19:28:03+00:00 | Vulnerability · Source |
| CVE-2026-4073 | redhat_vex | pdfl.io <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:28:01+00:00 | Vulnerability · Source |
| CVE-2026-4118 | redhat_vex | Call To Action Plugin <= 3.1.3 - Cross-Site Request Forgery via Settings Update | known not affected: 1 | 2026-06-05T19:28:00+00:00 | Vulnerability · Source |
| CVE-2026-4002 | redhat_vex | Petje.af <= 2.1.8 - Cross-Site Request Forgery to Account Deletion via 'petjeaf_disconnect' AJAX Action | known not affected: 1 | 2026-06-05T19:27:59+00:00 | Vulnerability · Source |
| CVE-2026-22054 | redhat_vex | CVE-2026-22054 | known not affected: 1 | 2026-06-05T19:27:58+00:00 | Vulnerability · Source |
| CVE-2026-4279 | redhat_vex | Bread & Butter: Content Gating for Verified Leads <= 8.2.0.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes | known not affected: 1 | 2026-06-05T19:27:58+00:00 | Vulnerability · Source |
| CVE-2026-22573 | redhat_vex | CVE-2026-22573 | known not affected: 1 | 2026-06-05T19:27:57+00:00 | Vulnerability · Source |
| CVE-2026-4011 | redhat_vex | Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute | known not affected: 1 | 2026-06-05T19:27:57+00:00 | Vulnerability · Source |
| CVE-2026-22872 | redhat_vex | Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability | known not affected: 1 | 2026-06-05T19:27:56+00:00 | Vulnerability · Source |
| CVE-2026-22692 | redhat_vex | October CMS: Twig Sandbox Bypass via Collection Methods | known not affected: 1 | 2026-06-05T19:27:56+00:00 | Vulnerability · Source |
| CVE-2026-22616 | redhat_vex | CVE-2026-22616 | known not affected: 1 | 2026-06-05T19:27:55+00:00 | Vulnerability · Source |
| CVE-2026-22726 | redhat_vex | Route Services Firewall Bypass | known not affected: 1 | 2026-06-05T19:27:54+00:00 | Vulnerability · Source |
| CVE-2026-22618 | redhat_vex | CVE-2026-22618 | known not affected: 1 | 2026-06-05T19:27:53+00:00 | Vulnerability · Source |
| CVE-2026-22155 | redhat_vex | CVE-2026-22155 | known not affected: 1 | 2026-06-05T19:27:52+00:00 | Vulnerability · Source |
| CVE-2026-22003 | redhat_vex | CVE-2026-22003 | known not affected: 1 | 2026-06-05T19:27:51+00:00 | Vulnerability · Source |
| CVE-2026-22880 | redhat_vex | Mobile SSO authentication flow allows credential theft via malicious server | known not affected: 1 | 2026-06-05T19:27:49+00:00 | Vulnerability · Source |
| CVE-2026-22574 | redhat_vex | CVE-2026-22574 | known not affected: 1 | 2026-06-05T19:27:49+00:00 | Vulnerability · Source |
| CVE-2026-22615 | redhat_vex | CVE-2026-22615 | known not affected: 1 | 2026-06-05T19:27:47+00:00 | Vulnerability · Source |
| CVE-2026-22077 | redhat_vex | Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet | known not affected: 1 | 2026-06-05T19:27:47+00:00 | Vulnerability · Source |
| CVE-2026-22707 | redhat_vex | Strapi Upload Plugin MIME Validation Bypass via Content API | known not affected: 1 | 2026-06-05T19:27:46+00:00 | Vulnerability · Source |