Nexcess vulnerabilities, page 2

27 vulnerabilities

Known vulnerabilities in Nexcess products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.

6.5CVE-2026-96834nexcessgivewp+1
EPSS score
0.33%
Subscriber Sensitive Data Exposure in GiveWP <= 4.16.9 versions.7.2CVE-2026-96830nexcessgivewp+1
EPSS score
0.20%
Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.9 versions.9.8CVE-2026-78265nexcessthe events calendar+1
EPSS score
0.56%
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.7.2CVE-2026-78263nexcessevent tickets+1
EPSS score
0.25%
Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.5.3CVE-2026-97066nexcessgivewp+1
EPSS score
0.23%
Unauthenticated Insecure Direct Object References (IDOR) in GiveWP <= 4.16.9 versions.6.5CVE-2026-97266nexcessvirtue/ascend/pinnacle toolkit+1
EPSS score
0.13%
Contributor Cross Site Scripting (XSS) in Virtue/Ascend/Pinnacle Toolkit <= 4.9.12.1 versions.5.4CVE-2026-97285nexcessthe events calendar+1
EPSS score
0.20%
Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.