Skip to content

Vendors

Unknown

22records16productslast change2026-08-31RSSas of the 2026-09-07 snapshot

Rows per week, last 26 weeks

12 rows in the last 26 weeks, 2 in the week to 2026-09-072 this week

Rows, not records: one record that changed for four products is four rows and one record. 2 of the 22 records raised a stated fix version; that is the count the publisher scorecard rates.

Choose a product · 16 products

Open the full product index. Counts beside products are records and are not added across products.

Every change, newest first

23 rows, shown as 17 lines
Every counted change to a CVE or CISA KEV record naming Unknown, newest first. A line standing for the same change across several records or products says how many and opens to every one.
Changed on, The day the commit that carried this change was read. Where the same change spans several days, the first and the last, never a midpoint. Not dated means no commit could be located for the row.ChangeCVEProductWhat the record says now
2026-08-31Affected range extendedCVE-2026-12965Super Store Finder WordPressstated at publication 7.8, now states 7.11
2026-08-31Affected range extendedCVE-2026-16739Epeken All Kurir For Woocommercestated at publication 2.1.2, now states 2.1.4
2026-08-13Affected range extendedCVE-2026-17020Salon Booking Systemstated at publication 10.30.33, now states 10.31.0
2026-08-12Affected range extendedCVE-2026-15229Pinpoint Booking Systemstated at publication 2.9.9.6.9, now states 2.9.9.7.1
2026-08-10Affected range extendedEasy Appointmentsstated at publication 3.12.26, now states 3.12.28
2026-08-10Affected range extendedCVE-2026-14188Easy Appointmentsstated at publication 3.12.26, now states 3.12.28
2026-08-10Affected range extendedCVE-2026-14223Easy Appointmentsstated at publication 3.12.26, now states 3.12.28
4 more rows in this change are not listed here. Open all 6 rows
2026-08-10Affected range extendedCVE-2026-14221Easy Appointmentsstated at publication 3.12.26, now states 4.0
2026-04-02Product addedCVE-2025-15400Openpix For Woocommercenot named as affected at publication, now names openpix for woocommerce
2024-04-08Fix version movedCVE-2024-1292wpb-show-corestated at publication 2.6, now states 2.7
2024-02-05Fix version movedCVE-2024-0238Eventonstated at publication 2.2.7, now states 2.2.8
2024-02-05Product addedEventon Premiumnot named as affected at publication, now names eventon premium
2024-02-05Product addedCVE-2024-0238Eventon Premiumnot named as affected at publication, now names eventon premium
2024-02-05Product addedCVE-2024-0237Eventon Premiumnot named as affected at publication, now names eventon premium
2023-12-04Affected range extendedCVE-2023-5605Url Shortifystated at publication 1.7.8, now states 1.7.9.1
2023-11-21Affected range extendedCVE-2023-4799Magic Embedsstated at publication 3.0.10, now states 3.1.2
2023-10-18Affected range extendedCVE-2023-4490Wp Job Portalstated at publication 2.0.3, now states 2.0.6
2023-10-16Affected range extendedCVE-2023-1400Modern Events Calendar Litestated at publication 5.16.2, now states 6.5.2.
2023-08-15Affected range extendedCVE-2023-2495greeklish-permalinkstated at publication 3.3, now states 3.5
2023-08-08Affected range extendedCVE-2023-2329Woocommerce Google Sheet Connectorstated at publication 1.3.4, now states 1.3.6
2023-03-29Affected range extendedCVE-2023-0336Ooohboi Steroids For Elementorstated at publication 2.1.3, now states 2.1.5

A line that names a count is the same change on that many records or products, shown once; it opens to every member. A closed line is not reached by find-in-page; the flat view (Every row, flat →) is. Only counted changes are here: a change a kind's false-positive filter refused, such as a product line being renumbered, is in no figure on this page.

Data sources and quality

One vendor, every counted kind of change: the rows where a CVE record or a CISA KEV entry naming Unknown changed after publication. The vendor name is the record's own text, compared without regard to case, so one organisation can appear under more than one spelling and this page holds the spellings that share its web address. Rows and records are different numbers and are never added together.

Not counted: a product line being renumbered, a boundary already named in the record's own description, and the other refusal classes are filtered as false positives and are in no figure here, so this page is what survived those filters rather than everything the catalog changed for this vendor.

Not checked: a record published before 2023 cannot have its state at publication recovered and was never compared, and a CISA KEV listing added before the first mirrored commit was never seen changing, so an absence from this page is not evidence that a record held.

How every one of these figures is measured, in full →

Shipped snapshot computed 2026-09-07 from catalog commit f5f9fc6fd7dc. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.