VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
298657 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-4094 | redhat_vex | FOX – Currency Switcher Professional for WooCommerce <= 1.4.5 - Missing Authorization to Authenticated (Contributor+) Configuration Deletion | known not affected: 1 | 2026-06-05T19:14:44+00:00 | Vulnerability · Source |
| CVE-2026-4670 | redhat_vex | Improper Authentication vulnerability in Progress MOVEit Automation | known not affected: 1 | 2026-06-05T19:14:44+00:00 | Vulnerability · Source |
| CVE-2026-4104 | redhat_vex | SQLi in Akmer Informatics' TeknoPass | known not affected: 1 | 2026-06-05T19:14:44+00:00 | Vulnerability · Source |
| CVE-2026-4320 | redhat_vex | Authorization Bypass in ICMS Content Management by Creartia Internet Consulting | known not affected: 1 | 2026-06-05T19:14:43+00:00 | Vulnerability · Source |
| CVE-2026-4834 | redhat_vex | WP ERP Pro <= 1.5.1 - Unauthenticated SQL Injection via 'search_key' Parameter | known not affected: 1 | 2026-06-05T19:14:42+00:00 | Vulnerability · Source |
| CVE-2026-4483 | redhat_vex | CVE-2026-4483 | known not affected: 1 | 2026-06-05T19:14:42+00:00 | Vulnerability · Source |
| CVE-2026-4609 | redhat_vex | ProfileGrid <= 5.9.8.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Group Joining | known not affected: 1 | 2026-06-05T19:14:42+00:00 | Vulnerability · Source |
| CVE-2026-4304 | redhat_vex | WeePie Cookie Allow <= 3.4.11 - Unauthenticated SQL Injection via 'consent' Parameter | known not affected: 1 | 2026-06-05T19:14:41+00:00 | Vulnerability · Source |
| CVE-2026-4119 | redhat_vex | Create DB Tables <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Database Table Creation/Deletion via admin-post.php | known not affected: 1 | 2026-06-05T19:14:40+00:00 | Vulnerability · Source |
| CVE-2026-4290 | redhat_vex | WP Travel Pro <= 10.6.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion Including Administrators | known not affected: 1 | 2026-06-05T19:14:40+00:00 | Vulnerability · Source |
| CVE-2026-4326 | redhat_vex | Vertex Addons for Elementor <= 1.6.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation via 'afeb_activate_required_plugins' | known not affected: 1 | 2026-06-05T19:14:39+00:00 | Vulnerability · Source |
| CVE-2026-4803 | redhat_vex | Royal Addons for Elementor <= 1.7.1056 - Unauthenticated Stored Cross-Site Scripting via 'status' Parameter in wpr_update_form_action_meta | known not affected: 1 | 2026-06-05T19:14:38+00:00 | Vulnerability · Source |
| CVE-2026-4344 | redhat_vex | Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Component Name | known not affected: 1 | 2026-06-05T19:14:38+00:00 | Vulnerability · Source |
| CVE-2026-4798 | redhat_vex | Avada Builder <= 3.15.1 - Unauthenticated SQL Injection via 'product_order' Parameter | known not affected: 1 | 2026-06-05T19:14:38+00:00 | Vulnerability · Source |
| CVE-2026-4029 | redhat_vex | Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Export | known not affected: 1 | 2026-06-05T19:14:37+00:00 | Vulnerability · Source |
| CVE-2026-4821 | redhat_vex | Proxy configuration command injection vulnerability found in GitHub Enterprise Server Management Console configuration API | known not affected: 1 | 2026-06-05T19:14:37+00:00 | Vulnerability · Source |
| CVE-2026-4883 | redhat_vex | Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload | known not affected: 1 | 2026-06-05T19:14:36+00:00 | Vulnerability · Source |
| CVE-2026-4030 | redhat_vex | Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion | known not affected: 1 | 2026-06-05T19:14:35+00:00 | Vulnerability · Source |
| CVE-2026-4667 | redhat_vex | HP System Optimizer - Escalation of Privilege | known not affected: 1 | 2026-06-05T19:14:35+00:00 | Vulnerability · Source |
| CVE-2026-4003 | redhat_vex | Users manager – PN <= 1.1.15 - Unauthenticated Privilege Escalation via Account Takeover via 'userspn_form_save' AJAX Action | known not affected: 1 | 2026-06-05T19:14:34+00:00 | Vulnerability · Source |
| CVE-2026-4388 | redhat_vex | Form Maker by 10Web <= 1.15.40 - Unauthenticated Stored Cross-Site Scripting via Matrix Field Text Box | known not affected: 1 | 2026-06-05T19:14:34+00:00 | Vulnerability · Source |
| CVE-2026-4808 | redhat_vex | Gerador de Certificados – DevApps <= 1.3.6 - Authenticated (Administrator+) Arbitrary File Upload | known not affected: 1 | 2026-06-05T19:14:34+00:00 | Vulnerability · Source |
| CVE-2026-4132 | redhat_vex | HTTP Headers <= 1.19.2 - Authenticated (Administrator+) External Control of File Name or Path to RCE via 'hh_htpasswd_path' and 'hh_www_authenticate_user' Parameters | known not affected: 1 | 2026-06-05T19:14:33+00:00 | Vulnerability · Source |
| CVE-2026-4880 | redhat_vex | Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication | known not affected: 1 | 2026-06-05T19:14:33+00:00 | Vulnerability · Source |
| CVE-2026-4503 | redhat_vex | Unauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download Endpoint | known not affected: 1 | 2026-06-05T19:14:33+00:00 | Vulnerability · Source |
| CVE-2026-4372 | redhat_vex | Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injection in huggingface/transformers | known not affected: 1 | 2026-06-05T19:14:32+00:00 | Vulnerability · Source |
| CVE-2026-4345 | redhat_vex | Stored Cross-Site Scripting (XSS) Vulnerability in Design Name | known not affected: 1 | 2026-06-05T19:14:32+00:00 | Vulnerability · Source |
| CVE-2026-4134 | redhat_vex | CVE-2026-4134 | known not affected: 1 | 2026-06-05T19:14:32+00:00 | Vulnerability · Source |
| CVE-2026-4776 | redhat_vex | CVE-2026-4776 | known not affected: 1 | 2026-06-05T19:14:31+00:00 | Vulnerability · Source |
| CVE-2026-4857 | redhat_vex | SailPoint IdentityIQ Debug UI Incorrect Authorization | known not affected: 1 | 2026-06-05T19:14:31+00:00 | Vulnerability · Source |
| CVE-2026-4031 | redhat_vex | Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Backup Interception | known not affected: 1 | 2026-06-05T19:14:30+00:00 | Vulnerability · Source |
| CVE-2026-4659 | redhat_vex | Unlimited Elements For Elementor <= 2.0.6 - Authenticated (Contributor+) Arbitrary File Read via Path Traversal in Repeater JSON/CSV URL with Path Traversal | known not affected: 1 | 2026-06-05T19:14:30+00:00 | Vulnerability · Source |
| CVE-2026-4365 | redhat_vex | LearnPress <= 4.3.2.8 - Missing Authorization to Unauthenticated Arbitrary Quiz Answer Deletion | known not affected: 1 | 2026-06-05T19:14:29+00:00 | Vulnerability · Source |
| CVE-2026-4868 | redhat_vex | Authorization Bypass Through User-Controlled Key in GitLab | known not affected: 1 | 2026-06-05T19:14:28+00:00 | Vulnerability · Source |
| CVE-2026-4145 | redhat_vex | CVE-2026-4145 | known not affected: 1 | 2026-06-05T19:14:27+00:00 | Vulnerability · Source |
| CVE-2026-4369 | redhat_vex | Stored Cross-Site Scripting (XSS) Vulnerability in Assembly Variant Name | known not affected: 1 | 2026-06-05T19:14:26+00:00 | Vulnerability · Source |
| CVE-2026-4352 | redhat_vex | JetEngine <= 3.8.6.1 - Unauthenticated SQL Injection via '_cct_search' Parameter | known not affected: 1 | 2026-06-05T19:14:26+00:00 | Vulnerability · Source |
| CVE-2026-22010 | redhat_vex | CVE-2026-22010 | known not affected: 1 | 2026-06-05T19:14:25+00:00 | Vulnerability · Source |
| CVE-2026-22315 | redhat_vex | CVE-2026-22315 | known not affected: 1 | 2026-06-05T19:14:25+00:00 | Vulnerability · Source |
| CVE-2026-22566 | redhat_vex | CVE-2026-22566 | known not affected: 1 | 2026-06-05T19:14:25+00:00 | Vulnerability · Source |
| CVE-2026-22069 | redhat_vex | O+ Connect Local Privilege Escalation Vulnerability | known not affected: 1 | 2026-06-05T19:14:24+00:00 | Vulnerability · Source |
| CVE-2026-22564 | redhat_vex | CVE-2026-22564 | known not affected: 1 | 2026-06-05T19:14:24+00:00 | Vulnerability · Source |
| CVE-2026-22562 | redhat_vex | CVE-2026-22562 | known not affected: 1 | 2026-06-05T19:14:24+00:00 | Vulnerability · Source |
| CVE-2026-22734 | redhat_vex | Cloud Foundry UAA SAML 2.0 Signature Bypass | known not affected: 1 | 2026-06-05T19:14:23+00:00 | Vulnerability · Source |
| CVE-2026-22599 | redhat_vex | Strapi Vulnerable to SQL Injection in Content Type Builder | known not affected: 1 | 2026-06-05T19:14:23+00:00 | Vulnerability · Source |
| CVE-2026-22619 | redhat_vex | CVE-2026-22619 | known not affected: 1 | 2026-06-05T19:14:23+00:00 | Vulnerability · Source |
| CVE-2026-22676 | redhat_vex | Barracuda RMM < 2025.2.2 Privilege Escalation via Insecure Directory Permissions | known not affected: 1 | 2026-06-05T19:14:23+00:00 | Vulnerability · Source |
| CVE-2026-22070 | redhat_vex | ColorOS Assistant Path Traversal Vulnerability | known not affected: 1 | 2026-06-05T19:14:23+00:00 | Vulnerability · Source |
| CVE-2026-22314 | redhat_vex | CVE-2026-22314 | known not affected: 1 | 2026-06-05T19:14:22+00:00 | Vulnerability · Source |
| CVE-2026-22828 | redhat_vex | CVE-2026-22828 | known not affected: 1 | 2026-06-05T19:14:22+00:00 | Vulnerability · Source |