CVE Tools
Track your stack

Vanquish

13 CVEs tracked since 2024. Since Nov 2024, none of them reached CISA KEV.

Vanquish CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Vanquish CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-1170
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-0260
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Vanquish's monthly top three, with their CVEs summed over those months.

  1. User Extra Fields52 months
  2. Woocommerce Support Ticket System31 month
  3. WordPress User Extra Fields31 month
  4. Upload Files Anywhere21 month
  5. Woocommerce Bulk Product Editor11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Vanquish.

  1. CVE-2026-28171WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability8.6
  2. CVE-2026-32522WordPress WooCommerce Support Ticket System plugin < 18.5 - Arbitrary File Deletion vulnerability8.6
  3. CVE-2026-27374WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability7.5
  4. CVE-2025-69379WordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Deletion vulnerability8.6
  5. CVE-2025-69381WordPress WooCommerce Bulk Product Editor plugin <= 3.0 - Broken Access Control vulnerability7.1
  6. CVE-2025-69380WordPress Upload Files Anywhere plugin <= 2.8 - Arbitrary File Download vulnerability7.5
  7. CVE-2025-69376WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability8.6
  8. CVE-2025-69377WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability7.7
  9. CVE-2025-67991WordPress User Extra Fields plugin <= 16.8 - Cross Site Scripting (XSS) vulnerability7.1
  10. CVE-2025-22713WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - SQL Injection vulnerability8.5
  11. CVE-2025-67579WordPress User Extra Fields plugin <= 16.8 - Broken Access Control vulnerability5.3
  12. CVE-2025-7846WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function8.8
  13. CVE-2025-53424WordPress WooCommerce Orders & Customers Exporter plugin <= 5.4 - Broken Access Control vulnerability6.5
  14. CVE-2025-48331WordPress WooCommerce Orders & Customers Exporter <= 5.0 - Sensitive Data Exposure Vulnerability7.5
  15. CVE-2024-13775WooCommerce Support Ticket System <= 17.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion and Information Exposure5.4

The record

Peak rank
#139 in Nov 2024
Busiest month shown
Nov 2024, 7 CVEs
Months with a KEV entry
0 since Nov 2024
Monthly snapshots
2 since 2024
Vanquish's full record, month by month