VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306217 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-27397 | redhat_vex | WordPress Really Simple Security Pro plugin <= 9.5.4.0 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T01:43:52+00:00 | Vulnerability · Source |
| CVE-2026-28040 | redhat_vex | WordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.0 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:52+00:00 | Vulnerability · Source |
| CVE-2026-27440 | redhat_vex | WordPress myCred plugin <= 2.9.7.6 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:52+00:00 | Vulnerability · Source |
| CVE-2026-27387 | redhat_vex | WordPress DirectoryPress plugin <= 3.6.26 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:51+00:00 | Vulnerability · Source |
| CVE-2026-27368 | redhat_vex | WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:51+00:00 | Vulnerability · Source |
| CVE-2026-27050 | redhat_vex | WordPress RealPress plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27092 | redhat_vex | WordPress WPAdverts plugin <= 2.3.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27328 | redhat_vex | WordPress EduBlink theme <= 2.0.7 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27327 | redhat_vex | WordPress YayMail – WooCommerce Email Customizer plugin <= 4.3.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27091 | redhat_vex | WordPress UiPress lite plugin <= 3.5.09 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27094 | redhat_vex | WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27360 | redhat_vex | WordPress Photo Gallery by 10Web plugin <= 1.8.38 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27354 | redhat_vex | WordPress WooCommerce Coming Soon Product with Countdown plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:50+00:00 | Vulnerability · Source |
| CVE-2026-27058 | redhat_vex | WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-27069 | redhat_vex | WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-27074 | redhat_vex | WordPress Shortcoder plugin <= 6.5.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-27090 | redhat_vex | WordPress Kenta Companion plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-27057 | redhat_vex | WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-27066 | redhat_vex | WordPress Live sales notification for WooCommerce plugin <= 2.3.60 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-27059 | redhat_vex | WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:48+00:00 | Vulnerability · Source |
| CVE-2026-27056 | redhat_vex | WordPress iThemes Sync plugin <= 3.2.8 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:47+00:00 | Vulnerability · Source |
| CVE-2026-27055 | redhat_vex | WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:46+00:00 | Vulnerability · Source |
| CVE-2026-25451 | redhat_vex | WordPress Bold Page Builder plugin <= 5.6.9 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:45+00:00 | Vulnerability · Source |
| CVE-2026-27042 | redhat_vex | WordPress NotificationX plugin <= 3.2.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:44+00:00 | Vulnerability · Source |
| CVE-2026-25473 | redhat_vex | WordPress WZone plugin <= 14.0.31 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:43+00:00 | Vulnerability · Source |
| CVE-2026-25469 | redhat_vex | WordPress ViaBill – WooCommerce plugin <= 1.1.53 - Settings Change vulnerability | known not affected: 1 | 2026-04-29T01:43:43+00:00 | Vulnerability · Source |
| CVE-2026-25472 | redhat_vex | WordPress Fusion Builder plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:43+00:00 | Vulnerability · Source |
| CVE-2026-25465 | redhat_vex | WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:43+00:00 | Vulnerability · Source |
| CVE-2026-25463 | redhat_vex | WordPress Wpresidence Core plugin <= 5.4.0 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:42+00:00 | Vulnerability · Source |
| CVE-2026-25416 | redhat_vex | WordPress News Kit Elementor Addons plugin <= 1.4.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:42+00:00 | Vulnerability · Source |
| CVE-2026-25459 | redhat_vex | WordPress Sober theme <= 3.5.12 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:41+00:00 | Vulnerability · Source |
| CVE-2026-25453 | redhat_vex | WordPress Advanced iFrame plugin <= 2025.10 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:41+00:00 | Vulnerability · Source |
| CVE-2026-25408 | redhat_vex | WordPress Broken Link Notifier plugin <= 1.3.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:40+00:00 | Vulnerability · Source |
| CVE-2026-25432 | redhat_vex | WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:40+00:00 | Vulnerability · Source |
| CVE-2026-25428 | redhat_vex | WordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:40+00:00 | Vulnerability · Source |
| CVE-2026-25422 | redhat_vex | WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:39+00:00 | Vulnerability · Source |
| CVE-2026-25420 | redhat_vex | WordPress MailerLite plugin <= 1.7.18 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:39+00:00 | Vulnerability · Source |
| CVE-2026-25415 | redhat_vex | WordPress WPBookit Pro plugin <= 1.6.18 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:38+00:00 | Vulnerability · Source |
| CVE-2026-25411 | redhat_vex | WordPress Revision Manager TMC plugin <= 2.8.22 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:38+00:00 | Vulnerability · Source |
| CVE-2026-25419 | redhat_vex | WordPress UpsellWP plugin <= 2.2.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:38+00:00 | Vulnerability · Source |
| CVE-2026-25410 | redhat_vex | WordPress WP-CORS plugin <= 0.2.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:37+00:00 | Vulnerability · Source |
| CVE-2026-25407 | redhat_vex | WordPress Cookiebot plugin <= 4.6.4 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:36+00:00 | Vulnerability · Source |
| CVE-2026-25409 | redhat_vex | WordPress JAMstack Deployments plugin <= 1.1.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:36+00:00 | Vulnerability · Source |
| CVE-2026-25374 | redhat_vex | WordPress Spa and Salon theme <= 1.3.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:35+00:00 | Vulnerability · Source |
| CVE-2026-25404 | redhat_vex | WordPress WP Job Manager plugin <= 2.4.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:35+00:00 | Vulnerability · Source |
| CVE-2026-25399 | redhat_vex | WordPress Serious Slider plugin <= 1.2.7 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:34+00:00 | Vulnerability · Source |
| CVE-2026-25402 | redhat_vex | WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <= 16.011.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:34+00:00 | Vulnerability · Source |
| CVE-2026-25395 | redhat_vex | WordPress Business Roy theme <= 1.1.4 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:33+00:00 | Vulnerability · Source |
| CVE-2026-25394 | redhat_vex | WordPress Fitness FSE theme <= 1.0.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:33+00:00 | Vulnerability · Source |
| CVE-2026-25388 | redhat_vex | WordPress Ads Pro plugin <= 5.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:33+00:00 | Vulnerability · Source |