Vendors whose records changed
as of the 2026-09-07 snapshot
1,243 vendors
named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.
Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.
Ranked by count, not rate; a vendor with more records has more that can change.
The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.
| Vendor | Records (sorted, lowest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both. | Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column. | Products, Distinct products named across this vendor's changed records. | Most common kind, The kind of change with the most rows for this vendor, and how many kinds there are. | Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it. |
|---|---|---|---|---|---|
| Wp Scripts | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Wp Codeus | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Wordwebsoftware | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Wordpresschef | 1 | 1 | 1 | Product added | 2026-04-08 |
| WordPress Foundation | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Wordlift | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Wordapp | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Woobewoo | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Wizit | 1 | 1 | 1 | Affected range extended | 2026-08-06 |
| Wisdmlabs | 1 | 1 | 1 | Product added | 2026-04-08 |
| Wind River | 1 | 1 | 1 | Product added | 2025-08-13 |
| Wilson | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Wikimedia Foundation | 1 | 1 | 1 | Fix version moved | 2025-07-03 |
| Widget Factory | 1 | 1 | 1 | Added to CISA KEV | 2026-06-16 |
| Westerndeal | 1 | 1 | 1 | Product added | 2026-04-08 |
| Weptile | 1 | 1 | 1 | Product added | 2026-04-01 |
| Wecantrack | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Webvitaly | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| website366.com | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| WebRTC | 1 | 1 | 1 | Ransomware use confirmed | 2025-05-13 |
| Webmin | 1 | 1 | 1 | Ransomware use confirmed | 2026-05-22 |
| Webinarpress | 1 | 1 | 1 | Affected range extended | 2024-08-22 |
| Webgeniuslab | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Webaways | 1 | 1 | 1 | Product added | 2026-04-08 |
| Webandprint | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Web Distributed Authoring and Versioning | 1 | 1 | 1 | Added to CISA KEV | 2025-06-10 |
| Weather Atlas | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Wc Lovers | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Wazuh | 1 | 1 | 1 | Added to CISA KEV | 2025-06-10 |
| Warfareplugins | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| w3s Cloud Technology | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Vw Themes | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Voidek | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Voidcoders | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| vllm-project | 1 | 1 | 1 | Product added | 2026-07-07 |
| Vite | 1 | 1 | 1 | Added to CISA KEV | 2026-01-22 |
| Vimal Kava | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Vim | 1 | 1 | 1 | Product added | 2026-08-19 |
| Villatheme | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Viaads | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Vgwort | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Vertim | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Versa | 1 | 1 | 1 | Added to CISA KEV | 2026-01-22 |
| Verkehrsauskunft österreich | 1 | 1 | 1 | Product added | 2025-09-13 |
| vektor,inc. | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| vektor-inc | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Vberkel | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Vaadin | 1 | 1 | 1 | Product added | 2026-03-10 |
| util-linux | 1 | 1 | 1 | Product added | 2025-12-22 |
| Uptodown | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
Counting & vendor names
Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.
Data sources and quality
Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates →
CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see →
Shipped snapshot computed 2026-09-07 from catalog commit ed5547afbae2. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.