Approved changes feed: RSS · Atom

cpe:2.3:a:nexcess:wpcomplete:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNexcess (f5bdcb66-98a6-529a-bcee-ee2e31e003a8)
ProductWpcomplete (7595ad28-2ee0-575d-b2e8-c437fce65cfa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57661 vulnerable 2026-07-29 01:03:15.854383 WordPress WPComplete plugin <= 2.9.5.5 - Broken Access Control vulnerability
MEDIUM (5.4)
Subscriber Broken Access Control in WPComplete <= 2.9.5.5 versions.
Published: 2026-06-26T14:53:28.777Z
Updated: 2026-06-26T20:15:19.229Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42750 vulnerable 2026-06-08 08:03:16.651722 WordPress WPComplete plugin <= 2.9.5.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nexcess WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through <= 2.9.5.4.
Published: 2026-05-27T09:49:05.564Z
Updated: 2026-05-27T10:49:51.087Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.