Skip to content
OpenAdvisories

Vendor

Nexcess

28 known vulnerabilities.

Products

GiveWP 13 Event Tickets 4 The Events Calendar 2 Virtue/Ascend/Pinnacle Toolkit 2 WPComplete 2 Kadence WooCommerce Email Designer 2 Starter Templates by Kadence WP 1 BookIt 1 Gutenberg Blocks by Kadence Blocks 1
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-116853

    WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in GiveWP <= 4.19.0.1 versions.

    Nexcess GiveWP
  • Medium 5.4
    CVE-2026-97285

    WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability

    Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.

    Nexcess The Events Calendar
  • Medium 6.5
    CVE-2026-97266

    WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.

    Nexcess Virtue/Ascend/Pinnacle Toolkit
  • Medium 5.3
    CVE-2026-97066

    WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.

    Nexcess GiveWP
  • Medium 6.5
    CVE-2026-96834

    WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability

    Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.

    Nexcess GiveWP
  • Medium 5.3
    CVE-2026-84767

    WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability

    Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

    Nexcess BookIt
  • Medium 6.5
    CVE-2026-73352

    WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in GiveWP <= 4.16.5.1 versions.

    Nexcess GiveWP
  • Medium 6.5
    CVE-2026-73348

    WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.

    Nexcess GiveWP
  • Medium 6.5
    CVE-2026-73357

    WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability

    Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.

    Nexcess GiveWP
  • Medium 5.3
    CVE-2026-73349

    WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.

    Nexcess GiveWP
  • Medium 4.3
    CVE-2026-66696

    WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability

    Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions.

    Nexcess Gutenberg Blocks by Kadence Blocks
  • Medium 5.3
    CVE-2026-65567

    WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Event Tickets <= 5.29.0.1 versions.

    Nexcess Event Tickets
  • Medium 6.5
    CVE-2026-65473

    WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12 versions.

    Nexcess Virtue/Ascend/Pinnacle Toolkit
  • Medium 5.4
    CVE-2026-65464

    WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in GiveWP <= 4.16.3 versions.

    Nexcess GiveWP
  • Medium 5.4
    CVE-2026-57661

    WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability

    Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.

    Nexcess WPComplete
  • Medium 6.5
    CVE-2026-42750

    WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.4.

    Nexcess WPComplete