How many CVEs does Addify have?

Addify has 8 published CVE records since 2022, including 2 in the last two years.

How many Addify CVEs are in CISA KEV?

None of Addify's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Addify products have the most CVEs?

The Addify products with the most published CVEs are role based pricing for woocommerce, automatic user roles switcher, Custom User Registration Fields for WooCommerce, custom_fields_for_woocommerce, custom_order_number.

What are the most common weakness types in Addify CVEs?

Addify's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-269 (Improper Privilege Management), CWE-35 (Path Traversal: '.../...//'), CWE-434 (Unrestricted Upload of File with Dangerous Type).

Are there public exploits for Addify vulnerabilities?

Yes — 5 of Addify's CVEs have a known public exploit.

How many critical Addify vulnerabilities are there?

Addify has 2 critical and 2 high-severity CVEs.

What is the average severity of Addify CVEs?

The average CVSS base score across Addify's scored CVEs is 7.7.

Addify Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 7.7
Critical / high: 50%
Actively exploited (KEV): 0%
Public exploit available: 63%
Patch available: 100%

Addify Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest Addify CVEs

Other vendors

Frequently asked questions

References

Track Addify vulnerabilities