Skip to content
OpenAdvisories

Vendor

Nexcess

28 known vulnerabilities.

Products

GiveWP 13 Event Tickets 4 The Events Calendar 2 Virtue/Ascend/Pinnacle Toolkit 2 WPComplete 2 Kadence WooCommerce Email Designer 2 Starter Templates by Kadence WP 1 BookIt 1 Gutenberg Blocks by Kadence Blocks 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.1
    CVE-2026-104672

    WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions.

    Nexcess GiveWP
  • High 8.1
    CVE-2026-104405

    WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions.

    Nexcess GiveWP
  • High 7.1
    CVE-2026-96830

    WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.

    Nexcess GiveWP
  • High 7.2
    CVE-2026-94677

    WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability

    Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions.

    Nexcess Kadence WooCommerce Email Designer Web / CMS
  • High 7.1
    CVE-2026-93526

    WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.4 versions.

    Nexcess Event Tickets
  • High 7.1
    CVE-2026-78263

    WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.

    Nexcess Event Tickets
  • High 7.5
    CVE-2026-73997

    WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability

    Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP <= 2.3.3 versions.

    Nexcess Starter Templates by Kadence WP
  • High 7.1
    CVE-2026-66690

    WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.

    Nexcess GiveWP
  • High 7.1
    CVE-2026-65441

    WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.3 versions.

    Nexcess GiveWP
  • High 7.5
    CVE-2026-57705

    WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Nexcess Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Tickets: from n/a through <= 5.28.5.

    Nexcess Event Tickets