VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
306217 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-25391 | redhat_vex | WordPress WP Wand plugin <= 1.3.07 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:32+00:00 | Vulnerability · Source |
| CVE-2026-25393 | redhat_vex | WordPress Hello FSE theme <= 1.0.6 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:32+00:00 | Vulnerability · Source |
| CVE-2026-25392 | redhat_vex | WordPress Update URLs – Quick and Easy way to search old links and replace them with new links in WordPress plugin <= 1.4.0 - Open Redirection vulnerability | known not affected: 1 | 2026-04-29T01:43:32+00:00 | Vulnerability · Source |
| CVE-2026-25389 | redhat_vex | WordPress EventPrime plugin <= 4.2.8.3 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-04-29T01:43:31+00:00 | Vulnerability · Source |
| CVE-2026-25385 | redhat_vex | WordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:30+00:00 | Vulnerability · Source |
| CVE-2026-25386 | redhat_vex | WordPress Ally plugin <= 4.0.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:30+00:00 | Vulnerability · Source |
| CVE-2026-25375 | redhat_vex | WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.10 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:30+00:00 | Vulnerability · Source |
| CVE-2026-25384 | redhat_vex | WordPress WP-Lister Lite for eBay plugin <= 3.8.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:30+00:00 | Vulnerability · Source |
| CVE-2026-25372 | redhat_vex | WordPress Academy LMS plugin <= 3.5.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:29+00:00 | Vulnerability · Source |
| CVE-2026-25363 | redhat_vex | WordPress FooGallery plugin <= 3.1.11 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:28+00:00 | Vulnerability · Source |
| CVE-2026-25364 | redhat_vex | WordPress Client Invoicing by Sprout Invoices plugin <= 20.8.8 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:28+00:00 | Vulnerability · Source |
| CVE-2026-25368 | redhat_vex | WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:28+00:00 | Vulnerability · Source |
| CVE-2026-25367 | redhat_vex | WordPress CitiLights theme < 3.7.2 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:28+00:00 | Vulnerability · Source |
| CVE-2026-25362 | redhat_vex | WordPress FooGallery plugin <= 3.1.11 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:27+00:00 | Vulnerability · Source |
| CVE-2026-25343 | redhat_vex | WordPress WP SMS plugin <= 7.1 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:26+00:00 | Vulnerability · Source |
| CVE-2026-25332 | redhat_vex | WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:26+00:00 | Vulnerability · Source |
| CVE-2026-25348 | redhat_vex | WordPress Download Alt Text AI plugin <= 1.10.15 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:26+00:00 | Vulnerability · Source |
| CVE-2026-25338 | redhat_vex | WordPress AI ChatBot with ChatGPT and Content Generator by AYS plugin <= 2.7.4 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:26+00:00 | Vulnerability · Source |
| CVE-2026-25337 | redhat_vex | WordPress Coachify theme <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:25+00:00 | Vulnerability · Source |
| CVE-2026-25335 | redhat_vex | WordPress Secure Copy Content Protection and Content Locking plugin <= 5.0.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:24+00:00 | Vulnerability · Source |
| CVE-2026-25336 | redhat_vex | WordPress Coachify theme <= 1.1.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:24+00:00 | Vulnerability · Source |
| CVE-2026-25333 | redhat_vex | WordPress Shopwell theme <= 1.0.11 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:24+00:00 | Vulnerability · Source |
| CVE-2026-25330 | redhat_vex | WordPress PublishPress Authors plugin <= 4.10.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:23+00:00 | Vulnerability · Source |
| CVE-2026-25331 | redhat_vex | WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:23+00:00 | Vulnerability · Source |
| CVE-2026-25324 | redhat_vex | WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability | known not affected: 1 | 2026-04-29T01:43:22+00:00 | Vulnerability · Source |
| CVE-2026-25323 | redhat_vex | WordPress OSM plugin <= 6.1.12 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:22+00:00 | Vulnerability · Source |
| CVE-2026-25325 | redhat_vex | WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.8 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-04-29T01:43:22+00:00 | Vulnerability · Source |
| CVE-2026-25329 | redhat_vex | WordPress Quiz And Survey Master plugin <= 10.3.4 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:22+00:00 | Vulnerability · Source |
| CVE-2026-25321 | redhat_vex | WordPress SupportCandy plugin <= 3.4.4 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:21+00:00 | Vulnerability · Source |
| CVE-2026-25322 | redhat_vex | WordPress PublishPress Revisions plugin <= 3.7.22 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:21+00:00 | Vulnerability · Source |
| CVE-2026-25319 | redhat_vex | WordPress Zita Elementor Site Library plugin <= 1.6.6 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:20+00:00 | Vulnerability · Source |
| CVE-2026-25318 | redhat_vex | WordPress WiserReview Product Reviews for WooCommerce plugin <= 2.9 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:20+00:00 | Vulnerability · Source |
| CVE-2026-25320 | redhat_vex | WordPress Elementor Contact Form DB plugin <= 2.1.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:20+00:00 | Vulnerability · Source |
| CVE-2026-25315 | redhat_vex | WordPress hCaptcha for WP plugin <= 4.21.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:20+00:00 | Vulnerability · Source |
| CVE-2026-25313 | redhat_vex | WordPress FluentForm plugin <= 6.1.14 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:19+00:00 | Vulnerability · Source |
| CVE-2026-25314 | redhat_vex | WordPress TOP Table Of Contents plugin <= 1.3.31 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:19+00:00 | Vulnerability · Source |
| CVE-2026-25024 | redhat_vex | WordPress ThirstyAffiliates plugin <= 3.11.9 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:19+00:00 | Vulnerability · Source |
| CVE-2026-25308 | redhat_vex | WordPress Simple Membership plugin <= 4.6.9 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:18+00:00 | Vulnerability · Source |
| CVE-2026-25310 | redhat_vex | WordPress Extend Link plugin <= 2.0.0 - Server Side Request Forgery (SSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:18+00:00 | Vulnerability · Source |
| CVE-2026-25311 | redhat_vex | WordPress Autoshare for Twitter plugin <= 2.3.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:18+00:00 | Vulnerability · Source |
| CVE-2026-25307 | redhat_vex | WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:17+00:00 | Vulnerability · Source |
| CVE-2026-25305 | redhat_vex | WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability | known not affected: 1 | 2026-04-29T01:43:16+00:00 | Vulnerability · Source |
| CVE-2026-25036 | redhat_vex | WordPress Passster plugin <= 4.2.25 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:16+00:00 | Vulnerability · Source |
| CVE-2026-25028 | redhat_vex | WordPress ElementInvader Addons for Elementor plugin <= 1.4.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:16+00:00 | Vulnerability · Source |
| CVE-2026-25020 | redhat_vex | WordPress WP Sync for Notion plugin <= 1.7.0 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:16+00:00 | Vulnerability · Source |
| CVE-2026-25021 | redhat_vex | WordPress Mizan Demo Importer plugin <= 0.1.3 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:15+00:00 | Vulnerability · Source |
| CVE-2026-25023 | redhat_vex | WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin <= 2.0.7 - Sensitive Data Exposure vulnerability | known not affected: 1 | 2026-04-29T01:43:15+00:00 | Vulnerability · Source |
| CVE-2026-25019 | redhat_vex | WordPress Atarim plugin <= 4.3.1 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:14+00:00 | Vulnerability · Source |
| CVE-2026-25016 | redhat_vex | WordPress Nelio Popups plugin <= 1.3.5 - Broken Access Control vulnerability | known not affected: 1 | 2026-04-29T01:43:14+00:00 | Vulnerability · Source |
| CVE-2026-25015 | redhat_vex | WordPress UsersWP plugin <= 1.2.53 - Cross Site Request Forgery (CSRF) vulnerability | known not affected: 1 | 2026-04-29T01:43:14+00:00 | Vulnerability · Source |