Nexcess vulnerabilities

Products

• Givewp 13
• Event Tickets 4
• Kadence Woocommerce Email Designer 2
• The Events Calendar 2
• Virtue/ascend/pinnacle Toolkit 2
• Wpcomplete 2

Newest

• nexcess givewp WordPress GiveWP plugin <= 4.19.0.1 - Broken Access Control vulnerability CVE-2026-116853 6.5 MediumOctober 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-104672 7.1 HighOctober 6, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.17.0 - Privilege Escalation vulnerability CVE-2026-104405 8.1 HighOctober 6, 2026
• nexcess the events calendar WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability CVE-2026-97285 5.4 MediumSeptember 30, 2026
• nexcess virtue/ascend/pinnacle toolkit WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-97266 6.5 MediumSeptember 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.9 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-97066 5.3 MediumSeptember 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.9 - Sensitive Data Exposure vulnerability CVE-2026-96834 6.5 MediumSeptember 30, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-96830 7.1 HighSeptember 30, 2026
• nexcess kadence woocommerce email designer WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability CVE-2026-94677 7.2 HighSeptember 30, 2026
• nexcess event tickets WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-93526 7.1 HighSeptember 23, 2026
• nexcess bookit WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability CVE-2026-84767 5.3 MediumSeptember 3, 2026
• nexcess the events calendar WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability CVE-2026-78265 9.8 CriticalAugust 24, 2026
• nexcess event tickets WordPress Event Tickets plugin <= 5.29.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-78263 7.1 HighAugust 24, 2026
• nexcess starter templates by kadence wp WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability CVE-2026-73997 7.5 HighAugust 18, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability CVE-2026-73352 6.5 MediumAugust 18, 2026
• nexcess givewp WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability CVE-2026-73348 6.5 MediumAugust 18, 2026
• nexcess givewp WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-73357 6.5 MediumAugust 13, 2026
• nexcess givewp WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability CVE-2026-73349 5.3 MediumAugust 13, 2026
• kadence wp gutenberg blocks by kadence blocks WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability CVE-2026-66696 4.3 MediumAugust 6, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-66690 7.1 HighAugust 6, 2026
• nexcess kadence woocommerce email designer WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability CVE-2026-28005 9.8 CriticalAugust 6, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-65441 7.1 HighJuly 27, 2026
• nexcess event tickets WordPress Event Tickets plugin <= 5.29.0.1 - Broken Access Control vulnerability CVE-2026-65567 5.3 MediumJuly 27, 2026
• nexcess virtue/ascend/pinnacle toolkit WordPress Virtue/Ascend/Pinnacle Toolkit plugin <= 4.9.12 - Cross Site Scripting (XSS) vulnerability CVE-2026-65473 6.5 MediumJuly 23, 2026
• nexcess givewp WordPress GiveWP plugin <= 4.16.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-65464 5.4 MediumJuly 23, 2026
• nexcess event tickets WordPress Event Tickets plugin <= 5.28.5 - Broken Access Control vulnerability CVE-2026-57705 7.5 HighJuly 13, 2026
• nexcess wpcomplete WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability CVE-2026-57661 5.4 MediumJune 26, 2026
• nexcess wpcomplete WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-42750 6.5 MediumMay 27, 2026