Nexcess vulnerabilities
28 CVEs and advisories name Nexcess as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116853WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability
- CVE-2026-104672WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-104405WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability
- CVE-2026-97285WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability
- CVE-2026-97266WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-97066WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-96834WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability
- CVE-2026-96830WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-94677WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability
- CVE-2026-93526WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-84767WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability
- CVE-2026-78265WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability
- CVE-2026-78263WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-73997WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability
- CVE-2026-73352WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability
- CVE-2026-73348WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
- CVE-2026-73357WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-73349WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
- CVE-2026-66696WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability
- CVE-2026-66690WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-28005WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability
- CVE-2026-65441WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-65567WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability
- CVE-2026-65473WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-65464WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-57705WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability
- CVE-2026-57661WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability
- CVE-2026-42750WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability