Skip to content

Every change, newest first

What a record said when it was published, what it says now, and the commit that changed it.

3,930 record edits refused · 339 advisory changes · newest first · grouped by dayCSVJSONRSS

Since
ChangedSourceRows

These rows are not counted anywhere on this site. Checked and refused means we compared this change and then rejected it: the false positive filter for this kind of change judged it to be a false positive rather than a real change. The row is shown so you can check the filter and disagree with us, and it is counted in no figure on this site. No advisory change is here: the advisory engine counts the 2,291 version pairs its filters refused by class rather than writing them out one by one, so this view holds CVE and KEV changes only.

Rows we checked and refused, counted nowhere, newest first, one line per change to a CVE record or a GHSA advisory, or per run of identical changes collapsed into one line.
Changed on, The day the change first became visible in the catalog's public history. Not the day the record was amended, which is earlier by an unknown margin.KindRecord or advisory, Which record was edited: a CVE id where the change was to the CVE catalog or the CISA KEV list, a GHSA id where it was to a GitHub advisory. The two are different units and are never counted together.Vendor or package, The vendor and product a CVE record names, with the organisation that publishes the record under them; or the package an advisory names and its registry.What changedDays to revision, The earlier stated value's interval. For a version boundary, it ends at the first replacement of that value; the reported current value may appear later. Starting points differ by kind: record publication, advisory publication, or the observed introduction of a KEV field value. Intervals are not directly comparable across kinds. Missing dates mean unknown, never zero. This does not date when a value became wrong.
Wed 8 Apr 2026· 29 record changes
2026-04-08Product addedWordfencenot named as affected at publication, now names email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressnot counted: Product identity rewritten with unchanged scopeDays to revision 657 to 706
2026-04-08same kind of change as the line aboveCVE-2024-2876same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed icegram/email subscribers by icegram express – email marketing, newsletters, automation for wordpress & woocommerce; a new product identity is not establishedDays to revision 706
2026-04-08same kind of change as the line aboveCVE-2024-5756same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed icegram/email subscribers by icegram express – email marketing, newsletters, automation for wordpress & woocommerce; a new product identity is not establishedDays to revision 657
2026-04-08Product addedWordfencenot named as affected at publication, now names carousel, slider, photo gallery with lightbox, video slider, by wp carouselnot counted: Product identity rewritten with unchanged scopeDays to revision 490 to 729
2026-04-08same kind of change as the line aboveCVE-2024-3020same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed shapedplugin/carousel, slider, gallery by wp carousel – image carousel & photo gallery, post carousel & post grid, product carousel & product grid for woocommerce; a new product identity is not establishedDays to revision 729
2026-04-08same kind of change as the line aboveCVE-2024-5020same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed shapedplugin/carousel, slider, gallery by wp carousel – image carousel with lightbox & photo gallery, video slider, post carousel & post grid, product carousel & product grid; a new product identity is not establishedDays to revision 490
2026-04-08Product addedWordfencenot named as affected at publication, now names poll maker – versus polls, anonymous polls, image pollsnot counted: Product identity rewritten with unchanged scopeDays to revision 706 to 720
2026-04-08same kind of change as the line aboveCVE-2024-3600same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed ays-pro/poll maker – best wordpress poll plugin; a new product identity is not establishedDays to revision 720
2026-04-08same kind of change as the line aboveCVE-2024-3601same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed ays-pro/poll maker – best wordpress poll plugin; a new product identity is not establishedDays to revision 706
2026-04-08Product addedCVE-2024-3609Wordfencenot named as affected at publication, now names reviewx – multi-criteria reviews for woocommerce with google reviews & schemaNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed reviewx/reviewx – multi-criteria rating & reviews for woocommerce; a new product identity is not establishedDays to revision 692
2026-04-08Product addedCVE-2024-3897Wordfencenot named as affected at publication, now names popup box – create countdown, coupon, video, contact form popupsNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed ays-pro/popup box – best wordpress popup plugin; a new product identity is not establishedDays to revision 706
2026-04-08Product addedWordfencenot named as affected at publication, now names pearl – header buildernot counted: Product identity rewritten with unchanged scopeDays to revision 665 to 706
2026-04-08same kind of change as the line aboveCVE-2024-4000same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed stylemix/wordpress header builder plugin – pearl; a new product identity is not establishedDays to revision 706
2026-04-08same kind of change as the line aboveCVE-2024-5468same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed stylemix/wordpress header builder plugin – pearl; a new product identity is not establishedDays to revision 665
2026-04-08Product addedWordfencenot named as affected at publication, now names master addons for elementor – widgets, extensions, theme builder, popup builder & template kitsnot counted: Product identity rewritten with unchanged scopeDays to revision 670 to 706
2026-04-08same kind of change as the line aboveCVE-2024-4265same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed litonice13/master addons – free widgets, hover effects, toggle, conditions, animations for elementor; a new product identity is not establishedDays to revision 706
2026-04-08same kind of change as the line aboveCVE-2024-4580same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed litonice13/master addons – free widgets, hover effects, toggle, conditions, animations for elementor; a new product identity is not establishedDays to revision 692
2026-04-08same kind of change as the line aboveCVE-2024-5382same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed litonice13/master addons – free widgets, hover effects, toggle, conditions, animations for elementor; a new product identity is not establishedDays to revision 670
2026-04-08Product addedWordfencenot named as affected at publication, now names wpzoom addons for elementor – starter templates & widgetsnot counted: Product identity rewritten with unchanged scopeDays to revision 658 to 694
2026-04-08same kind of change as the line aboveCVE-2024-4370same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpzoom/wpzoom addons for elementor (templates, widgets); a new product identity is not establishedDays to revision 694
2026-04-08same kind of change as the line aboveCVE-2024-5147same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpzoom/wpzoom addons for elementor (templates, widgets); a new product identity is not establishedDays to revision 686
2026-04-08same kind of change as the line aboveCVE-2024-5686same vendor as the line abovesame change as the line aboveNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wpzoom/wpzoom addons for elementor (templates, widgets); a new product identity is not establishedDays to revision 658
2026-04-08Product addedCVE-2024-4371Wordfencenot named as affected at publication, now names codesigner – all in one elementor woocommerce builderNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed codexpert/codesigner – the most compact and user-friendly elementor woocommerce builder; a new product identity is not establishedDays to revision 664
2026-04-08Product addedCVE-2024-4666Wordfencenot named as affected at publication, now names borderless – addons and templates for elementorNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed visualmodo/borderless – widgets, elements, templates and toolkit for elementor & gutenberg; a new product identity is not establishedDays to revision 694
2026-04-08Product addedCVE-2024-5020Wordfencenot named as affected at publication, now names envira gallery – image photo gallery, albums, video gallery, slideshows & moreNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed smub/gallery plugin for wordpress – envira photo gallery; a new product identity is not establishedDays to revision 490
2026-04-08Product addedCVE-2024-5449Wordfencenot named as affected at publication, now names wp dark mode – improve accessibility with ai powered dark themeNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed wppool/wp dark mode – wordpress dark mode plugin for improved accessibility, dark theme, night mode, and social sharing; a new product identity is not establishedDays to revision 672
2026-04-08Product addedCVE-2024-5647Wordfencenot named as affected at publication, now names robo gallery – photo & image sliderNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed robosoft/photo gallery, images, slider in rbs image gallery; a new product identity is not establishedDays to revision 279
2026-04-08Product addedCVE-2024-5879Wordfencenot named as affected at publication, now names hubspot all-in-one marketing – forms, popups, live chatNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed hubspotdev/hubspot – crm, email marketing, live chat, forms & analytics; a new product identity is not establishedDays to revision 587
2026-04-08Product addedCVE-2024-6069Wordfencenot named as affected at publication, now names pie register – user registration, profiles & content restrictionNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed genetechproducts/registration forms – user registration forms, invitation-based registrations, front-end user profile, login form & content restriction; a new product identity is not establishedDays to revision 638
2026-04-08Product addedCVE-2024-6210Wordfencenot named as affected at publication, now names duplicator – backups & migration plugin – cloud backups, scheduled backups, & moreNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed smub/duplicator – migration & backup plugin; a new product identity is not establishedDays to revision 637
2026-04-08Product addedCVE-2024-6262Wordfencenot named as affected at publication, now names portfolio filter galleryNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed awordpresslife/portfolio gallery – image gallery plugin; a new product identity is not establishedDays to revision 650
2026-04-08Product addedCVE-2024-6365Wordfencenot named as affected at publication, now names product table for woocommerce by wbwNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed woobewoo/product table by wbw; a new product identity is not establishedDays to revision 639
2026-04-08Product addedCVE-2024-6467Wordfencenot named as affected at publication, now names appointment booking calendar plugin and scheduling plugin – bookingpressNot counted: Product identity rewritten with unchanged scope. unchanged affected scope with a rewritten title of removed reputeinfosystems/appointment booking calendar plugin and online scheduling plugin – bookingpress; a new product identity is not establishedDays to revision 631
2026-04-08Product addedCVE-2026-26477mitrenot named as affected at publication, now names dokuwikiNot counted: No products named at publication. record named no affected product at publication — there was nothing to conclude 'not affected' fromDays to revision 5
2026-04-08CVSS base score changedCVE-2026-40035
whole record
VulnCheck
stated at publication 9.8, now states 9.3Assessments not comparable · base scoreCriticalCriticalNot counted: CVSS assessments are not comparable. the displayed maximum pair is not established on the same CVSS v3/v4 version, CNA and assessment context; changed scenarios, competing metrics and v2 bands are not comparableDays to revision 0
Tue 7 Apr 2026· 6 record changes
2026-04-07Affected range extendedCVE-2026-27043
themegoodsphotography
Patchstack
stated at publication 7.7.5, now states 7.7.6Release branch starts at 0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operatorDays to revision 19
2026-04-072 commitsProduct addedrapid7not named as affected at publication, now names mfc-ex670Branches and original-value intervals are stated on each row.not counted: Already named at publicationDays to revision 286
2026-04-07same kind of change as the line aboveCVE-2024-51979same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside brother industries, ltd/mfc-ex670w — the record spelled this product out all alongDays to revision 286
2026-04-07same kind of change as the line aboveCVE-2024-51980same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside brother industries, ltd/mfc-ex670w — the record spelled this product out all alongDays to revision 286
2026-04-07same kind of change as the line aboveCVE-2024-51981same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside brother industries, ltd/mfc-ex670w — the record spelled this product out all alongDays to revision 286
2026-04-07same kind of change as the line aboveCVE-2024-51983same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside brother industries, ltd/mfc-ex670w — the record spelled this product out all alongDays to revision 286
2026-04-07same kind of change as the line aboveCVE-2024-51984same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside brother industries, ltd/mfc-ex670w — the record spelled this product out all alongDays to revision 286
Mon 6 Apr 2026· 2 record changes
2026-04-06CVSS base score changedCVE-2026-33579
whole record
VulnCheck
stated at publication 9.8, now states 9.9Assessments not comparable · base scoreCriticalCriticalOriginal value first replaced 2026-03-31; this value first seen 2026-04-06.Not counted: CVSS assessments are not comparable. the displayed maximum pair is not established on the same CVSS v3/v4 version, CNA and assessment context; changed scenarios, competing metrics and v2 bands are not comparableDays to revision 0
2026-04-06CVSS base score changedCVE-2026-34570
whole record
GitHub_M
stated at publication 10.0, now states 8.8Assessments not comparable · base scoreCriticalHighNot counted: CVSS version set changed. no CVSS version was rescored — the maximum moved because a different CVSS version was added or removedDays to revision 5
Fri 3 Apr 2026· 2 record changes
2026-04-03Affected range extendedCVE-2026-27413
cozmoslabsprofile builder pro
Patchstack
stated at publication 3.13.9, now states 3.14.0Release branch starts at 0.Not counted: Same claim, other operator. `lte` rewritten as `lt` on the same or the next release — the same claim under the other operatorDays to revision 15
2026-04-03CVSS base score changedCVE-2026-22664
whole record
VulnCheck
stated at publication 7.1, now states 7.7Assessments not comparable · base scoreHighHighNot counted: CVSS version set changed. no CVSS version was rescored — the maximum moved because a different CVSS version was added or removedDays to revision 0
Thu 2 Apr 2026· 241 record changes
2026-04-02Fix version moved
applemacos
stated at publication 12.7, now states 12.7.4Release branch starts at 0.not counted: Description already named the later valueDays to revision 661 to 756
2026-04-02same kind of change as the line aboveCVE-2024-23201same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23216same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23227same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23230same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23234same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23244same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23245same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23247same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
15 more rows in this change are not listed here. Open all 23 rows
2026-04-02Fix version moved
applemacos
stated at publication 13.6, now states 13.6.5Release branch starts at 0.not counted: Description already named the later valueDays to revision 661 to 756
2026-04-02same kind of change as the line aboveCVE-2024-23201same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23216same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23227same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23229same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 689
2026-04-02same kind of change as the line aboveCVE-2024-23230same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23231same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23234same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23245same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
17 more rows in this change are not listed here. Open all 25 rows
2026-04-02Fix version moved
appleios and ipados
stated at publication 16.7, now states 16.7.5Release branch starts at 0.not counted: Description already named the later valueDays to revision 708 to 801
2026-04-02same kind of change as the line aboveCVE-2024-23206same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23211same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23212same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23213same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23214same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-27791same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 708
2026-04-02Fix version moved
applemacos
stated at publication 12.7, now states 12.7.3Branches and original-value intervals are stated on each row.not counted: Description already named the later valueDays to revision 29 to 801
2026-04-02same kind of change as the line aboveCVE-2024-23207same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.3 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23212same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.3 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23222same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Original value first replaced 2024-02-21; this value first seen 2026-04-02.Not counted: Description already named the later value. the record's own description at publication already named 12.7.3 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 29
2026-04-02same kind of change as the line aboveCVE-2024-27791same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.3 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 708
2026-04-02Fix version moved
applemacos
stated at publication 13.6, now states 13.6.4Branches and original-value intervals are stated on each row.not counted: Description already named the later valueDays to revision 29 to 801
2026-04-02same kind of change as the line aboveCVE-2024-23207same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23212same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-23222same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Original value first replaced 2024-02-21; this value first seen 2026-04-02.Not counted: Description already named the later value. the record's own description at publication already named 13.6.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 29
2026-04-02same kind of change as the line aboveCVE-2024-23224same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 801
2026-04-02same kind of change as the line aboveCVE-2024-27791same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.4 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 708
2026-04-02Fix version moved
appleios and ipados
stated at publication 16.7, now states 16.7.6Release branch starts at 0.not counted: Description already named the later valueDays to revision 756 to 758
2026-04-02same kind of change as the line aboveCVE-2024-23225same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 758
2026-04-02same kind of change as the line aboveCVE-2024-23231same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23235same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23246same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23257same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23259same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23262same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
2026-04-02same kind of change as the line aboveCVE-2024-23263same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 756
7 more rows in this change are not listed here. Open all 15 rows
2026-04-02Fix version moved
applemacos
stated at publication 12.7, now states 12.7.5Release branch starts at 0.not counted: Description already named the later valueDays to revision 442 to 689
2026-04-02same kind of change as the line aboveCVE-2024-23229same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 689
2026-04-02same kind of change as the line aboveCVE-2024-27789same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 689
2026-04-02same kind of change as the line aboveCVE-2024-27799same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27800same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27802same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27805same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27806same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27817same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.5 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
5 more rows in this change are not listed here. Open all 13 rows
2026-04-02Fix version moved
appleios and ipados
stated at publication 16.7, now states 16.7.8Release branch starts at 0.not counted: Description already named the later valueDays to revision 442 to 689
2026-04-02same kind of change as the line aboveCVE-2024-23251same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-23282same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27789same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 689
2026-04-02same kind of change as the line aboveCVE-2024-27799same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27800same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27802same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27805same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27806same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
11 more rows in this change are not listed here. Open all 19 rows
2026-04-02Fix version moved
applemacos
stated at publication 12.7, now states 12.7.6Release branch starts at 0.not counted: Description already named the later valueDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-23261same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27826same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27873same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27877same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27881same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27882same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27883same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40774same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.7.6 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
25 more rows in this change are not listed here. Open all 33 rows
2026-04-02Fix version moved
applemacos
stated at publication 13.6, now states 13.6.8Release branch starts at 0.not counted: Description already named the later valueDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-23261same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27826same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27873same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27877same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27881same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27882same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27883same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40774same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.8 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
29 more rows in this change are not listed here. Open all 37 rows
2026-04-02Fix version movedCVE-2024-23300
applegarageband
stated at publication 10.4, now states 10.4.11Release branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 10.4.11 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 751
2026-04-02Fix version moved
applemacos
stated at publication 13.6, now states 13.6.7Release branch starts at 0.not counted: Description already named the later valueDays to revision 442 to 689
2026-04-02same kind of change as the line aboveCVE-2024-27789same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 689
2026-04-02same kind of change as the line aboveCVE-2024-27799same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27800same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27802same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27805same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27806same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27817same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 661
2026-04-02same kind of change as the line aboveCVE-2024-27823same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 13.6.7 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
5 more rows in this change are not listed here. Open all 13 rows
2026-04-02Fix version movedCVE-2024-27793
appleitunes for windows
stated at publication 12.13, now states 12.13.2Release branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 12.13.2 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 694
2026-04-02Fix version moved
appleios and ipados
stated at publication 16.7, now states 16.7.9Release branch starts at 0.not counted: Description already named the later valueDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-27873same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40776same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40778same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40779same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40780same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40782same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40784same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
2026-04-02same kind of change as the line aboveCVE-2024-40785same vendor as the line abovesame change as the line aboveRelease branch starts at 0.Not counted: Description already named the later value. the record's own description at publication already named 16.7.9 — the structured field was corrected to the value the prose stated, not a fix that movedDays to revision 612
15 more rows in this change are not listed here. Open all 23 rows
2026-04-02Fix version moved
appleios and ipados
stated at publication 18.3, now states 18.4Release branch starts at *.not counted: Another branch advancednot dated
2026-04-02same kind of change as the line aboveCVE-2025-24113same vendor as the line abovesame change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 18.3 still holdsnot dated
2026-04-02same kind of change as the line aboveCVE-2025-24163same vendor as the line abovesame change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 18.3 still holdsnot dated
2026-04-02Fix version movedCVE-2025-24113
applemacos
stated at publication 15.3, now states 15.4Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.3 still holdsnot dated
2026-04-02Fix version movedCVE-2025-24113
applesafari
stated at publication 18.3, now states 18.4Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 18.3 still holdsnot dated
2026-04-02Fix version moved
applevisionos
stated at publication 2.3, now states 2.4Release branch starts at *.not counted: Another branch advancednot dated
2026-04-02same kind of change as the line aboveCVE-2025-24113same vendor as the line abovesame change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2.3 still holdsnot dated
2026-04-02same kind of change as the line aboveCVE-2025-24163same vendor as the line abovesame change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2.3 still holdsnot dated
2026-04-02Fix version movedCVE-2025-24163
appletvos
stated at publication 18.3, now states 18.4Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 18.3 still holdsnot dated
2026-04-02Fix version movedCVE-2025-24163
applewatchos
stated at publication 11.3, now states 11.4Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.3 still holdsnot dated
2026-04-02Fix version movedCVE-2025-31259
applemacos
stated at publication 15.5, now states 26Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.5 still holdsnot dated
2026-04-02Fix version moved
applemacos
stated at publication 15.7, now states 26Release branch starts at *.not counted: Another branch advancednot dated
2026-04-02same kind of change as the line aboveCVE-2025-43288same vendor as the line abovesame change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.7 still holdsnot dated
2026-04-02same kind of change as the line aboveCVE-2025-43345same vendor as the line abovesame change as the line aboveRelease branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.7 still holdsnot dated
2026-04-02Fix version movedCVE-2025-43364
applemacos
stated at publication 15.7, now states 26.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 15.7 still holdsnot dated
2026-04-02Product addednot named as affected at publication, now names ipadosnot counted: Already named at publicationDays to revision 142 to 477
2026-04-02same kind of change as the line aboveCVE-2024-54502same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 477
2026-04-02same kind of change as the line aboveCVE-2024-54508same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 477
2026-04-02same kind of change as the line aboveCVE-2024-54534same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 477
2026-04-02same kind of change as the line aboveCVE-2024-54543same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 430
2026-04-02same kind of change as the line aboveCVE-2025-24085same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 430
2026-04-02same kind of change as the line aboveCVE-2025-24097same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 367
2026-04-02same kind of change as the line aboveCVE-2025-24113same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 430
2026-04-02same kind of change as the line aboveCVE-2025-24131same vendor as the line abovesame change as the line aboveNot counted: Already named at publication. already named at publication inside apple/ios and ipados — the record spelled this product out all alongDays to revision 430
2 more rows in this change are not listed here. Open all 10 rows
2026-04-02CVSS base score changedCVE-2023-53908
whole record
VulnCheck
stated at publication 8.7, now states 8.8Assessments not comparable · base scoreHighHighNot counted: CVSS assessments are not comparable. the displayed maximum pair is not established on the same CVSS v3/v4 version, CNA and assessment context; changed scenarios, competing metrics and v2 bands are not comparableDays to revision 106
Wed 1 Apr 2026· 48 record changes
2026-04-01Fix version movedCVE-2026-35099
lakeside softwaresystrack agent
mitre
stated at publication 11.2.1.28, now states 11.5.0.15Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 11.2.1.28 still holdsnot dated
2026-04-01Fix version movedCVE-2025-58214
gaviasindutri
Patchstack
stated at publication 1.3.0, now states 1.3.0Release branch starts at 0.Not counted: Same claim, other operator. `lt` rewritten as `lte` on the same or the next release — the same claim under the other operatorDays to revision 208
2026-04-01Fix version movedCVE-2025-58215
gaviasziston
Patchstack
stated at publication 1.4.5, now states 1.4.5Release branch starts at 0.Not counted: Same claim, other operator. `lt` rewritten as `lte` on the same or the next release — the same claim under the other operatorDays to revision 204
2026-04-01Fix version movedCVE-2025-58628
kamleshyadavmiraculous
Patchstack
stated at publication 2.0.9, now states 2.0.9Release branch starts at 0.Not counted: Same claim, other operator. `lt` rewritten as `lte` on the same or the next release — the same claim under the other operatorDays to revision 208
2026-04-01Fix version movedCVE-2025-10450
rticonnext professional
stated at publication 7.3.1, now states 7.7.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 7.3.1 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-23771
muralipush notification for post and buddypress
Patchstack
stated at publication 2.11, now states 2.12Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2.11 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-23843
wphrmanagerwp-hr manager: the human resources plugin for wordpress
Patchstack
stated at publication 3.1.0, now states 3.2.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.1.0 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-23905
johannes van poelgeestadmin options pages
Patchstack
stated at publication 0.9.7, now states 0.9.8Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 0.9.7 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-24602
wp24wp24 domain check
Patchstack
stated at publication 1.10.14, now states 1.10.15Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.10.14 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-24764
a. jones(simply) guest author name
Patchstack
stated at publication 4.36, now states 4.40Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 4.36 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-24767
facturaoneticketbai facturas para woocommerce
Patchstack
stated at publication 3.19, now states 3.21Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.19 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-24780
printcartprintcart web to print product designer for woocommerce
Patchstack
stated at publication 2.4.0, now states 2.4.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2.4.0 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-25111
wp spell checkwp spell check
Patchstack
stated at publication 9.21, now states 9.22Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 9.21 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-25138
rishion page seo + whatsapp chat button
Patchstack
stated at publication 2.0.0, now states 2.0.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2.0.0 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-25146
saleandrosongkick concerts and festivals
Patchstack
stated at publication 0.9.7, now states 0.10.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 0.9.7 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-25147
phillip.goochauto seo
Patchstack
stated at publication 2.5.6, now states 2.6.6Release branch starts at *.Not counted: Product line renumbered. leading component changed with meaningful tail intact — product-line renumbering, not a fix bumpnot dated
2026-04-01Affected range extendedCVE-2025-26591
noor alamwp fancybox
Patchstack
stated at publication 1.0.4, now states 1.0.4Release branch starts at 0.Not counted: Same claim, other operator. `lte` rewritten as `unaffected_start` on the same or the next release — the same claim under the other operatorDays to revision 271
2026-04-01Affected range extendedCVE-2025-26891
vw themesibtana
Patchstack
stated at publication 1.2.4.9, now states 1.2.5.9Release branch starts at 0.Not counted: Product line renumbered. leading component changed with meaningful tail intact — product-line renumbering, not a fix bumpDays to revision 400
2026-04-01Affected range extendedCVE-2025-27012
a1posta1post.bg shipping for woo
Patchstack
stated at publication 1.5.1, now states 1.5.1Release branch starts at 0.Not counted: Same claim, other operator. `lte` rewritten as `unaffected_start` on the same or the next release — the same claim under the other operatorDays to revision 403
2026-04-01Affected range extendedCVE-2025-27296
revenueflexauto ad inserter – increase google adsense and ad manager revenue
Patchstack
stated at publication 1.5, now states 1.5.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.5 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-27301
nazmul hasan robinnhr options table manager
Patchstack
stated at publication 1.1.2, now states 1.1.3Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.1.2 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-27307
oooorglequotes llama
Patchstack
stated at publication 3.0.1, now states 3.0.2Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.0.1 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-27323
jon bishopwp about author
Patchstack
stated at publication 1.5, now states 1.6Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.5 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-27330
playerjsplayerjs
Patchstack
stated at publication 2.23, now states 2.24Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2.23 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-28875
shanebpbp email assign templates
Patchstack
stated at publication 1.6, now states 1.7Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.6 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-28887
fastmoverplugins last updated column
Patchstack
stated at publication 0.1.3, now states 0.1.4Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 0.1.3 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-28908
pipdigpipdisqus
Patchstack
stated at publication 1.6, now states 1.7Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.6 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-28925
hieu nguyenwati chat and notification
Patchstack
stated at publication 1.1.2, now states 1.1.5Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.1.2 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-28938
bjoernwp performance pack
Patchstack
stated at publication 2.5.3, now states 2.5.4Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 2.5.3 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-28942
trust paymentstrust payments gateway for woocommerce
Patchstack
stated at publication 1.1.4, now states 2.0.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.1.4 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-28998
serpednetserped.net
Patchstack
stated at publication 4.6, now states 4.7Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 4.6 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30577
mendibassbrowser address bar color
Patchstack
stated at publication 3.3, now states 3.4Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.3 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30624
wordliftwordlift
Patchstack
stated at publication 3.54.4, now states 3.54.5Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 3.54.4 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30636
ability, incaccessibility suite
Patchstack
stated at publication 4.19, now states 4.20Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 4.19 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30929
amazewpfluxtore
Patchstack
stated at publication 1.6.0, now states 1.6.3Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.6.0 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30932
wp compresswp compress for mainwp
Patchstack
stated at publication 6.30.32, now states 6.50.05Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 6.30.32 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30951
stiofanblockstrap page builder - bootstrap blocks
Patchstack
stated at publication 0.1.36, now states 0.1.37Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 0.1.36 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30953
crm perkswp gravity forms salesforce
Patchstack
stated at publication 1.4.7, now states 1.4.8Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.4.7 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30954
crm perkswp gravity forms constant contact plugin
Patchstack
stated at publication 1.1.0, now states 1.1.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.1.0 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30975
saifumakadd custom codes
Patchstack
stated at publication 4.80, now states 5.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 4.80 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-30998
rico macchiwp links page
Patchstack
stated at publication 4.9.6, now states 5.0Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 4.9.6 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-31004
croover.incrich table of contents
Patchstack
stated at publication 1.4.0, now states 1.4.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.4.0 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-31005
uzaireasyfonts
Patchstack
stated at publication 1.1.2, now states 1.1.3Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.1.2 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-31015
adrian tobeywordpress smtp service, email delivery solved! — mailhawk
Patchstack
stated at publication 1.3.1, now states 1.3.2Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.3.1 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-31018
firedrumfiredrum email marketing
Patchstack
stated at publication 1.64, now states 1.65Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.64 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-31020
weblibertysimple spoiler
Patchstack
stated at publication 1.4, now states 1.5Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.4 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-31031
astoundifyjob colors for wp job manager
Patchstack
stated at publication 1.0.4, now states 1.0.5Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.0.4 still holdsnot dated
2026-04-01Affected range extendedCVE-2025-31060
apusthemecapie
Patchstack
stated at publication 1.0.40, now states 1.0.53.1Release branch starts at *.Not counted: Another branch advanced. another release branch was added — every branch stated at publication is still stated, so 1.0.40 still holdsnot dated

Two units, never added: changes to a CVE record or KEV entry, and changes to a GitHub advisory. Rows, not records: a moved fix version or an extended range counts once per record, product and release branch; an added product once per record and product; every other kind once per record or advisory. Days to revision is how long the value first stated stood: from the record's or advisory's publication, or from the day a KEV field value was first seen, to the first commit that replaced it. An addition to KEV has no earlier value and shows none. A collapsed line is one publisher's run of identical changes on one day; it says how many, and opens to all of them.

Data sources and quality

Not checked: A CVE record published before 2023, and a KEV listing added before 2025-01-27, were never seen changing. An absence here is not evidence that a record held.

A change shown here is a change to a public record, evidenced by a commit anyone can read in the publisher's own history. It is not an assertion of wrongdoing, negligence or bad faith by any publisher or vendor, not evidence that any fix was incomplete, and not a statement about anyone's systems.

The units, the refusals, the cut-offs and every source, in full →

Check my CVEs against these changes →