Nexcess vulnerabilities

Newest CVEs

• CVE-2026-116853

  WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability

  Nexcess · GiveWP

  Medium6.5
• CVE-2026-104672

  WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability

  Nexcess · GiveWP

  High7.1
• CVE-2026-104405

  WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability

  Nexcess · GiveWP

  High8.1
• CVE-2026-97285

  WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability

  Nexcess · The Events Calendar

  Medium5.4
• CVE-2026-97266

  WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability

  Nexcess · Virtue/Ascend/Pinnacle Toolkit

  Medium6.5
• CVE-2026-97066

  WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability

  Nexcess · GiveWP

  Medium5.3
• CVE-2026-96834

  WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability

  Nexcess · GiveWP

  Medium6.5
• CVE-2026-96830

  WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability

  Nexcess · GiveWP

  High7.1
• CVE-2026-94677

  WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability

  Nexcess · Kadence WooCommerce Email Designer

  High7.2
• CVE-2026-93526

  WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability

  Nexcess · Event Tickets

  High7.1