Vendor

Rymera Web Co Pty Ltd.

No Rymera Web Co Pty Ltd. CVE is in the CISA KEV catalogue.

Tracked since 15 Sep · latest article Wed 16 Sep · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 in the full CISA catalogue · all time
High exploit odds · current: 0; EPSS top 5%, not in KEV
Articles · 7 days: 0; none this week

Exploited, by due date

CSV download

No Rymera Web Co Pty Ltd. CVE is in the CISA KEV catalogue.

Products

1 product · 1 CVE in coverage

Woocommerce Wholesale Lead Capture1 CVE · 0 in KEVlatest 16 Sep

Coverage

3 articles · all timeFull timeline

Three articles so far, 15 Sep to 16 Sep.

1 2 3

Tue 15 Sep · first reportHackers Exploit WooCommerce Plugin Flaw to Upload PHP Web ShellsSecurityOnline
Wed 16 SepAttackers Exploit WooCommerce Plugin Flaw to Upload PHP Web ShellsSOCRadar
Wed 16 SepAttackers Exploit Critical WooCommerce Plugin Flaw to Upload WebshellsInfosecurity

All CVEs in coverage

CVE-2026-27540WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerabilityCVSS9.0Critical–Not in KEV2.7%EPSS3articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

Rymera Web Co Pty Ltd.

Exploited, by due date

Products

Coverage

All CVEs in coverage

On this device

Intel

Settings

Keyboard shortcuts