Skip to content

Vendors whose records changed

as of the 2026-09-07 snapshot

1,243 vendors

named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.

Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.

Ranked by records changed

1 to 50 of 1,243 vendors
Top 25 only
Vendors by records that changedrecords, never rows

Ranked by count, not rate; a vendor with more records has more that can change.

The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.

VendorRecords (sorted, lowest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both.Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column.Products, Distinct products named across this vendor's changed records.Mostly, The kind of change with the most rows for this vendor, and how many kinds there are.Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it.
文派翻译(wp Chinese translation)111Affected range extended2026-04-01
Zookatron111Affected range extended2026-04-01
Zoho Mail111Product added2026-05-21
ZKTeco111Added to CISA KEV2025-05-19
Zhuyi111Affected range extended2026-04-08
Zamartz111Affected range extended2026-04-01
Yuri Baranov111Affected range extended2026-04-01
ytdl-org111Product added2024-07-03
Yotpo111Affected range extended2026-04-08
Yoohw Studio111Affected range extended2026-04-28
Yocoadmin111Affected range extended2026-04-08
Ylianst111Product added2026-07-31
Yiiframework111Added to CISA KEV2025-05-02
Yealink111Product added2025-07-28
XWiki111Added to CISA KEV2025-10-30
Xtreeme111Affected range extended2026-04-01
Xpoda türkiye Information Technology Inc.111Product added2026-02-11
Xjb111Affected range extended2026-04-01
Xfinitysoft111Affected range extended2026-04-08
Xdg111Product added2026-07-21
Xcitium111Product added2026-06-23
Xavi Ivars111Affected range extended2026-04-01
www.15.to111Affected range extended2026-04-01
wssoffice21111Product added2026-04-08
Ws Form111Product added2026-04-08
Writesonic111Affected range extended2026-04-01
Wpzoom111Affected range extended2024-08-22
Wpxpo111Product added2026-04-23
Wpwheels111Affected range extended2026-04-01
Wpwax111Affected range extended2026-04-01
Wpvncom111Affected range extended2026-04-08
Wpsuperiors Developer111Affected range extended2026-04-01
Wpspeedo111Product added2026-04-08
Wpsoul111Affected range extended2026-03-03
Wproyal111Product added2026-04-08
Wprio111Affected range extended2026-04-01
Wporbit Support111Affected range extended2026-04-01
Wpopal111Product added2026-04-08
wpo365111Product added2026-04-08
Wpkube111Affected range extended2026-04-01
Wpkoithemes111Affected range extended2026-04-01
Wphocus111Affected range extended2026-04-01
Wpgmaps111Product added2026-04-01
Wpdever111Affected range extended2026-04-01
Wpdelower111Affected range extended2026-04-08
Wpdatatables111Product added2026-04-08
Wpbits111Affected range extended2026-04-08
wp-experts.in111Affected range extended2026-04-01
Wp Travel111Affected range extended2026-04-01
Wp Table Builder111Affected range extended2026-04-01
Counting & vendor names

Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.

Every change, one row each →The rate, by publisher →Download the data →
Data coverage & methodology

Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates ↗

CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see ↗

Shipped snapshot computed 2026-09-07 from catalog commit ed5547afbae2. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.