What is the official website of Backer ?

The official website of Backer is https://www.backergroup.com/en.

What is Backer's cybersecurity risk score?

Backer has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Backer experienced?

According to Rankiteo, Backer currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Backer been affected by any supply chain cyber incidents ?

According to Rankiteo, Backer has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Backer have SOC 2 Type 1 certification ?

According to Rankiteo, Backer is not certified under SOC 2 Type 1.

Does Backer have SOC 2 Type 2 certification ?

According to Rankiteo, Backer does not hold a SOC 2 Type 2 certification.

Does Backer comply with GDPR ?

According to Rankiteo, Backer is not listed as GDPR compliant.

Does Backer have PCI DSS certification ?

According to Rankiteo, Backer does not currently maintain PCI DSS compliance.

Does Backer comply with HIPAA ?

According to Rankiteo, Backer is not compliant with HIPAA regulations.

Does Backer have ISO 27001 certification ?

According to Rankiteo,Backer is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Backer operate in ?

Backer operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does Backer have ?

Backer employs approximately 267 people worldwide.

Does Backer own any subsidiaries ?

Backer presently has no subsidiaries across any sectors.

How many LinkedIn followers does Backer have ?

Backer's official LinkedIn profile has approximately 3,677 followers.

What is the NAICS classification code for Backer ?

Backer is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does Backer have a Crunchbase profile ?

No, Backer does not have a profile on Crunchbase.

Does Backer have a LinkedIn profile ?

Yes, Backer maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/backer-ab.

How many cybersecurity incidents has Backer experienced ?

As of June 14, 2026, Rankiteo reports that Backer has not experienced any cybersecurity incidents.

How many peer or competitor companies does Backer have ?

Backer has an estimated 9,636 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Backer

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

Backer Vendor Cyber Rating & Cyber Score

backergroup.com

Add Your Compliance Badge

Every time you turn on an electric appliance or warm up your home, there's a high probability that Backer has had a hand in crafting the solution. With approximately 3,000 employees globally, Backer is a premier supplier of heating solutions and components for a diverse range of applications in more than 100 countries. Our product portfolio includes sophisticated heating elements and systems for household appliances, industrial applications, and HVAC systems, designed to deliver not only comfort but also energy efficiency. Stay connected for updates on career opportunities. Join us at Backer in engineering innovative solutions that enhance everyday life and contribute to a sustainable future. Be part of a dynamic and evolving company

Backer A.I CyberSecurity Scoring

Scoring History

Backer

Backer CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Backer Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Backer

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Backer in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Backer in 2026.

Incident Types Backer vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Backer in 2026.

Incident History - Backer (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Backer Subsidiaries

Backer

Appliances, Electrical, and Electronics Manufacturing

Website: https://www.backergroup.com/en

Company Size: 201-500 employees

NIBE GroupIndustrial Machinery Manufacturing

NIBERenewable Energy Equipment Manufacturing

NIBE Energy SystemsRenewable Energy Semiconductor Manufacturing

Contura ABTillverkning av industriella maskiner

NIBE Energy Systems LimitedRenewable Energy Equipment Manufacturing

RhossIndustrial Machinery Manufacturing

CTC ABIndustrial Machinery Manufacturing

CTC Heat pumpsIndustrial Machinery Manufacturing

BentoneIndustrial Machinery Manufacturing

CTC ProfessionalReal Estate

Heat Trace LimitedAppliances, Electrical, and Electronics Manufacturing

NIBE FRANCEIndustrial Machinery Manufacturing

ait-deutschland GmbHRenewable Energy Semiconductor Manufacturing

alpha innotecRenewable Energy Semiconductor Manufacturing

KKT chillersMachinery Manufacturing

NOVELANRenewable Energy Semiconductor Manufacturing

NOVELAN ÖsterreichRenewable Energy Semiconductor Manufacturing

alpha innotec ÖsterreichRenewable Energy Semiconductor Manufacturing

Eltwin GroupAppliances, Electrical, and Electronics Manufacturing

CetethermIndustrial Machinery Manufacturing

HT SpAAppliances, Electrical, and Electronics Manufacturing

Stovax GazcoManufacturing

BACKER FER SRLAppliances, Electrical, and Electronics Manufacturing

TempeffIndustrial Machinery Manufacturing

Heatrod Elements LtdAppliances, Electrical, and Electronics Manufacturing

BRAUDE a trading division of Heatrod Elements LtdAppliances, Electrical, and Electronics Manufacturing

ABK-Qviller ASHVAC and Refrigeration Equipment Manufacturing

Danotherm Electric A/SAppliances, Electrical, and Electronics Manufacturing

GrayBar LtdRailroad Equipment Manufacturing

Norske Backer ASAppliances, Electrical, and Electronics Manufacturing

DZ Dražice, člen skupiny NIBEIndustrial Machinery Manufacturing

Backer ElectricAppliances, Electrical, and Electronics Manufacturing

HT EST DivisionAppliances, Electrical, and Electronics Manufacturing

Loading…

Backer Similar Companies

Dyson

dyson.com

Dyson solves real-world problems and creates better products through the application of engineering, science, design and creativity. It is a family-owned, global technology company, founded by Sir James Dyson who remains at the helm alongside his son Jake. Since inventing the first cyclonic bagless vacuum cleaner, the DC01, Dyson has consistently invested in research and development to improve its products and technologies radically. Dyson offers products across a growing range of areas: floorcare, air purification, robotics, haircare including formulations, lighting, hand drying, and most recently audio. Dyson continues to expand into new areas. Today, Dyson sells products in more than 80 markets, has 450 Dyson stores worldwide and is available in all major technology and beauty retailers. Dyson has global headquarters in Singapore and major technology campuses in Singapore, the UK, Malaysia, and the Philippines. Its global team of engineers, scientists and software developers are focused on developing technology-enabled products which work better and which people love to use. Key areas of focus have included high-speed electric digital motors, sensing and vision systems, robotics, machine learning and aerodynamics. Beyond products, to encourage an inventive future, Dyson is also inspiring the next generation of engineers and inventors through the Dyson Institute of Engineering and Technology, the James Dyson Foundation and the James Dyson Award. The Dyson family applies its problem-solving approach in other fields, and established Dyson Farming in 2012. It is one of the largest farming businesses in the UK, extending to 36,000 acres across Lincolnshire, Oxfordshire, Gloucestershire and Somerset. It is a family-owned enterprise unlike any other, focussed on long-term investment in British farming and the countryside to grow tasty and nutritious food.

TDK

tdk.com

TDK Corporation is a world leader in electronic solutions for the smart society based in Tokyo, Japan. Built on a foundation of material sciences mastery, TDK welcomes societal transformation by resolutely remaining at the forefront of technological evolution. It was established in 1935 to commercialize ferrite, a key material in electronic and magnetic products. TDK’s comprehensive, innovation-driven portfolio features passive components such as ceramic, aluminum electrolytic and film capacitors, as well as magnetics, high-frequency, and piezo and protection devices. The product spectrum also includes sensors and sensor systems such as temperature and pressure, magnetic, and MEMS sensors. In addition, TDK provides power supplies and energy devices, magnetic heads, software and more. These products are marketed under the product brands TDK, EPCOS, InvenSense, Micronas, Tronics, and TDK-Lambda. TDK focuses on demanding markets in automotive, industrial and consumer electronics, and information and communication technology. The company has a network of design and manufacturing locations and sales offices in Asia, Europe, and in North and South America. In fiscal 2025, TDK posted total sales of USD 14.4 billion and employed about 105,000 people worldwide.

Delta Electronics

deltaww.com

Delta is a global innovative provider of switching power supplies and DC brushless fans, as well as a major source for power management solutions, components, visual displays, industrial automation, networking products, and renewable energy solutions. Delta Group has sales offices worldwide and manufacturing plants in Taiwan, China, Thailand, Mexico, India and Europe. As a global innovator in power electronics, Delta's mission is, "To provide innovative, clean and efficient energy solutions for a better tomorrow." Delta is committed to environmental protection and has implemented green, lead-free production and waste management programs for many years.

Panasonic

cb holdings.panasonic

Founded in 1918, and today a global leader in developing innovative technologies and solutions for wide-ranging applications in the consumer electronics, housing, devices, B2B solutions and energy sectors worldwide, the Panasonic Group switched to an operating company system on April 1, 2022 with Panasonic Holdings Corporation serving as a holding company. The Group reported consolidated net sales of 8,458.2 billion yen for the year ended March 31, 2025.

Havells India Ltd

havells.com

Havells India Limited is a leading FMEG company with a strong global presence, manufacturing a wide range of electrical products for residential, commercial, and industrial use. Key brands include Havells, Havells Studio, Lloyd, Havells Crabtree, Standard Electricals and REO. With a focus on innovation and customer satisfaction, Havells boasts a robust distribution network, exclusive brand showrooms, and a strong emphasis on service. The company prioritizes sustainability, with a focus on renewable energy, waste reduction, and environmental conservation. Havells is committed to social responsibility, with initiatives in education, sanitation, and community development. Recognized for its sustainability efforts, Havells has been ranked in the Dow Jones Sustainability Index and maintains an 'A' rating in the MSCI ESG Rating. Learn more about Havells on the following channels: Facebook I Youtube I Twitter I Instagram I

Midea Group

midea-group.com

Midea Group aspires to the vision of “Bringing Great Innovations to Life”, upholding the Founders’ philosophy of creating a better life through technology. Midea Group has evolved into a global leading technology company specializing in six major businesses including Smart Home Business, Industrial Technologies, Building Technologies, Robotics &Automation, Midea Healthcare and Annto Logistics. Over the past ten years, we have invested nearly 100 billion yuan in R&D and developed a global network spanning 38 R&D centers and 44 major production sites across the world. At present, Midea Group’s products and services serve more than 500 million customers in over 200 countries and regions, our brand portfolio contains Little Swan, Toshiba, WAHIN, COLMO, Clivet, Eureka, KUKA, GMCC, Welling, LINVOL, and Wandong. With nearly 200,000 employees globally and more than 40,000 based internationally, Midea Group ranks 277th on the Global Fortune 500 in 2024, marking the 9th consecutive year on the list. The company holds A/A2/A credit ratings from S&P, Moody's, and Fitch respectively. Midea Group places a strong focus on technology leadership, driving innovation across global markets. Midea adheres to the new strategic axis of "Technology Leadership, User Direct Access, Digital Intelligence Driven, and Global Breakthroughs," we advance our leadership in Smart Home and Smart Manufacturing while fostering talent. By providing growth opportunities in a dynamic, global environment, we empower our teams to shape the future of innovation.

Keysight Technologies

keysight.com

Keysight empowers innovators to explore, design, and bring world-changing technologies to life. As the industry’s premier global innovation partner, Keysight’s software-centric solutions serve engineers across the design and development environment, enabling them to deliver tomorrow’s breakthroughs at speed and with reduced risk. Keysight leverages its strength as the world’s leading test and measurement provider and today enables innovators to push the boundaries of engineering by quickly solving design, emulation, and test challenges to help create the best product experiences. Whether you're looking to improve your design and development process, optimize and secure your network, or harness AI and digital twins to get a head start on technologies like 6G, AV and EV, IoT, or quantum computing — Keysight accelerates innovation across the workflow with intelligent insights built on the most accurate measurements. Our fusion of technology knowledge, measurement science expertise, and tailored solutions helps you forge ahead with confidence in our connected and dynamic world. Keysight Technologies (NYSE: KEYS) is an S&P 500 technology company, headquartered in Santa Rosa, California, with offices and manufacturing worldwide. Keysight owns 2,000+ patents and our ~15,000 employees work with nearly 32,000 customers worldwide to start technology revolutions. Keysight customers span the communications, industrial automation, aerospace and defense, automotive, energy, semiconductor, and general electronics markets. Join us! To accelerate innovation to connect and secure the world, innovators start here, with Keysight.

Foxconn

cb foxconn.com

Established in Taiwan in 1974, Hon Hai Technology Group (Foxconn) (2317: Taiwan) is the world’s largest electronics manufacturer. Foxconn is also the leading technological solution provider, and it continuously leverages its expertise in software and hardware to integrate its unique manufacturing systems with emerging technologies. By capitalizing on its expertise in Cloud Computing, Mobile Devices, IoT, Big Data, AI, Smart Networks, and Robotics / Automation, the Group has expanded not only its capabilities into the development of electric vehicles, digital health and robotics, but also three key technologies –AI, semiconductors and new-generation communications technology – which are key to driving its long-term growth strategy and the four core product pillars: Consumer Products, Enterprise Products, Computing Products and Components and Others. In 2021, Hon Hai's annual revenue reached NT$5.99 trillion. The company has established R&D and manufacturing centers in other markets around the world including China, India, Japan, Vietnam, Malaysia, Czech Republic, U.S. and more. With a focus on research and development, the company owns more than 54,253 patents. In addition to maximizing value-creation for customers who include many of the world’s leading technology companies, Foxconn is also dedicated to championing environmental sustainability in the manufacturing process and serving as a best-practices model for global enterprises. The company has received widespread international accolades and recognition since its establishment. The company ranked 22nd on the Fortune Global 500 rankings in 2021 and 25th in the Top 100 Digital Companies in the Forbes ranking of the World’s Best Employers in 2019. Moreover, on Forbes’ World’s Best Employers 2021 rankings, the company ranked 1st in Taiwan. Foxconn is also the only Taiwanese private company awarded for 5 consecutive years of Clarivate Top 100 Global Innovators (2018 - 2022).

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

Loading…

NEWS

Backer CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 19, 2026 09:25 AM

Copla: Cybersecurity Startup Raises €6 Million for Compliance Platform

Lithuanian cybersecurity startup Copla has raised €6 million in a Series A round. Iron Wolf Capital, a Baltic investor focused on DeepTech...

Read Article

January 23, 2026 08:00 AM

CertiK eyes IPO at $2 billion valuation as it targets 'first public web3 cybersecurity' listing

CertiK co-founder Ronghui Gu said the cybersecurity firm is exploring paths to go public in an interview this week in Davos, Switzerland.

Read Article

January 16, 2026 08:00 AM

Europe’s Largest Defense Fund for Startups Set for €500 Million

German investor Digital Transformation Capital Partners GmbH is on track to raise Europe's largest-ever dedicated venture capital fund for...

Read Article

January 14, 2026 08:00 AM

Belgian cybersecurity startup Aikido hits unicorn status with new funding round

By Supantha Mukherjee STOCKHOLM, Jan 14 - Belgium's Aikido Security has raised $60 million from investors led by tech-focused private...

Read Article

December 19, 2025 08:00 AM

Early backer of unicorns Personio and Enpal, German VC Picus Capital closes €150 million preferred equity deal

Munich-based venture capital firm Picus Capital announced the closing of a €150 million preferred equity financing transaction provided by...

Read Article

December 04, 2025 08:00 AM

Cybersecurity startup imper.ai launches with $28M to combat AI-powered impersonation threats

Founded by elite cyber-intelligence veterans, the startup has developed a platform to fight deepfakes and AI-driven impersonation,...

Read Article

November 08, 2025 08:00 AM

CEE Startup & Tech Weekly: €80M United Founders Fund

Discover the latest CEE tech roundup featuring major venture fund launches, startup funding milestones, and AI cybersecurity acquisitions.

Read Article

November 04, 2025 08:00 AM

Israeli Cybersecurity Startup Got a $33 Million Term Sheet From Craft.

AI is fueling a surge in cyberattacks. Startups, especially in Israel, are rushing to use their own AI to stay one step ahead of the bad...

Read Article

October 29, 2025 07:00 AM

SimSpace: $39 Million Raised For Expanding AI Cyber Range Capabilities

SimSpace, a Boston-based cybersecurity company specializing in realistic and intelligent cyber ranges, has secured $39 million in new...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…