VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
302330 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-6446 | redhat_vex | My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-6449 | redhat_vex | Booking for Appointments and Events Calendar – Amelia <= 2.1.2 - Unauthenticated Authorization Bypass via Remote Approval Endpoint | known not affected: 1 | 2026-05-04T20:21:15+00:00 | Vulnerability · Source |
| CVE-2026-4790 | redhat_vex | Premium Addons for Elementor <= 4.11.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'custom_svg' Parameter | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-6378 | redhat_vex | Maxi Blocks <= 2.1.9 - Authenticated (Author+) Stored Cross-Site Scripting via Style Card REST API | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-5077 | redhat_vex | Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute | known not affected: 1 | 2026-05-04T20:21:14+00:00 | Vulnerability · Source |
| CVE-2026-4650 | redhat_vex | FundPress <= 2.0.8 - Missing Authorization to Unauthenticated Arbitrary Donation Status Modification via donate_action_status AJAX Handler | known not affected: 1 | 2026-05-04T20:21:13+00:00 | Vulnerability · Source |
| CVE-2026-4658 | redhat_vex | Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes | known not affected: 1 | 2026-05-04T20:21:13+00:00 | Vulnerability · Source |
| CVE-2026-7685 | redhat_vex | Edimax BR-6208AC setWAN buffer overflow | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-3504 | redhat_vex | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-7684 | redhat_vex | Edimax BR-6428nC setWAN buffer overflow | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-4024 | redhat_vex | Royal Addons for Elementor <= 1.7.1056 - Missing Authorization to Unauthenticated Form Action Meta Modification | known not affected: 1 | 2026-05-04T20:21:12+00:00 | Vulnerability · Source |
| CVE-2026-7641 | redhat_vex | Import and export users and customers <= 2.0.8 - Authenticated (Subscriber+) Privilege Escalation via Multisite Capability Meta Fields | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7647 | redhat_vex | Profile Builder Pro <= 3.14.5 - Unauthenticated PHP Object Injection | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7489 | redhat_vex | Sunnet｜CTMS - SQL Injection | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7649 | redhat_vex | ARMember <= 4.0.60 - Unauthenticated SQL Injection via 'orderby' Parameter | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7470 | redhat_vex | Tenda 4G300 SafeMacFilter sub_427C3C stack-based overflow | known not affected: 1 | 2026-05-04T20:21:10+00:00 | Vulnerability · Source |
| CVE-2026-7607 | redhat_vex | TRENDnet TEW-821DAP Firmware Udpate auto_update_firmware buffer overflow | known not affected: 1 | 2026-05-04T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-6229 | redhat_vex | Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter | known not affected: 1 | 2026-05-04T20:21:09+00:00 | Vulnerability · Source |
| CVE-2026-7491 | redhat_vex | Zyosoft｜School App - Insecure Direct Object Reference | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7435 | redhat_vex | SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7513 | redhat_vex | UTT HiPER 1200GW formRemoteControl strcpy buffer overflow | known not affected: 1 | 2026-05-04T20:21:08+00:00 | Vulnerability · Source |
| CVE-2026-7490 | redhat_vex | Sunnet｜CTMS and CPAS - Arbitrary File Upload | known not affected: 1 | 2026-05-04T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-7503 | redhat_vex | code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow | known not affected: 1 | 2026-05-04T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-5324 | redhat_vex | Brizy – Page Builder <= 2.8.11 - Unauthenticated Stored Cross-Site Scripting via FileUpload Field Value | known not affected: 1 | 2026-05-04T20:21:07+00:00 | Vulnerability · Source |
| CVE-2026-7458 | redhat_vex | User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint | known not affected: 1 | 2026-05-04T20:21:06+00:00 | Vulnerability · Source |
| CVE-2026-7049 | redhat_vex | PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter | known not affected: 1 | 2026-05-04T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-6963 | redhat_vex | WP Mail Gateway <= 1.8 - Missing Authorization to Authenticated (Subscriber+) SMTP Configuration Modification via 'wmg_save_provider_config' AJAX Action | known not affected: 1 | 2026-05-04T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-6320 | redhat_vex | Salon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal | known not affected: 1 | 2026-05-04T20:21:05+00:00 | Vulnerability · Source |
| CVE-2026-5111 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Hidden Product Field in Repeater | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5113 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Consent Field Hidden Input | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5112 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Calculation Product Field in Repeater | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5110 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Single Product Field Inside Repeater | known not affected: 1 | 2026-05-04T20:21:04+00:00 | Vulnerability · Source |
| CVE-2026-5063 | redhat_vex | NEX-Forms <= 9.1.11 - Unauthenticated Stored Cross-Site Scripting via POST Parameter Key Names | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4100 | redhat_vex | Paid Memberships Pro <= 3.6.5 - Missing Authorization to Authenticated (Subscriber+) Stripe Webhook Deletion and Payment Processing Disruption | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4060 | redhat_vex | Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-5109 | redhat_vex | Gravity Forms <= 2.10.0 - Unauthenticated Stored Cross-Site Scripting via Product Option | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4882 | redhat_vex | User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4061 | redhat_vex | Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-4062 | redhat_vex | Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter | known not affected: 1 | 2026-05-04T20:21:03+00:00 | Vulnerability · Source |
| CVE-2026-40601 | redhat_vex | Chartbrew: Missing Authorization in /api/chart/:chart_id/query via team-level refresh toggle | known not affected: 1 | 2026-05-04T20:21:02+00:00 | Vulnerability · Source |
| CVE-2026-0703 | redhat_vex | NextMove Lite - Thank You Page for WooCommerce <= 2.23.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'xlwcty_current_date' Shortcode | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-36762 | redhat_vex | CVE-2026-36762 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-56568 | redhat_vex | CVE-2025-56568 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-14726 | redhat_vex | Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-3143 | redhat_vex | Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-2052 | redhat_vex | Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2026-36765 | redhat_vex | CVE-2026-36765 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-46115 | redhat_vex | CVE-2025-46115 | known not affected: 1 | 2026-05-04T20:21:01+00:00 | Vulnerability · Source |
| CVE-2025-70072 | redhat_vex | Assimp: Assimp: Denial of Service via FBXConverter components | known not affected: 8 | 2026-05-04T16:57:14+00:00 | Vulnerability · Source |
| CVE-2025-70070 | redhat_vex | Assimp: Assimp: Denial of Service via FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry() | known not affected: 8 | 2026-05-04T16:57:14+00:00 | Vulnerability · Source |