Vulnerabilidades de Nexcess

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Nexcess: 7 registro(s), com severidade, exploração e correções.

WPComplete 2 GiveWP 2 Event Tickets 2 The Events Calendar 1

Somente exploradas (KEV) →

CVE-2026-104672 Alta · 7.1 CWE-79 06/10/2026

WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.

CVE-2026-104405 Alta · 8.1 CWE-266 06/10/2026

WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.

CVE-2026-78265 Crítica · 9.8 CWE-502 24/08/2026

WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.

CVE-2026-78263 Alta · 7.1 CWE-79 24/08/2026

WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.

CVE-2026-57705 Alta · 7.5 CWE-862 13/07/2026

WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through <= 5.28.5.

CVE-2026-57661 Média · 5.4 CWE-862 26/06/2026

WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability

Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.

CVE-2026-42750 Média · 6.5 CWE-79 27/05/2026

WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.4.