What is the official website of Ford Romania ?

The official website of Ford Romania is https://www.ford.ro/.

What is Ford Romania's cybersecurity risk score?

Ford Romania has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Ford Romania experienced?

According to Rankiteo, Ford Romania currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ford Romania been affected by any supply chain cyber incidents ?

According to Rankiteo, Ford Romania has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Ford Romania have SOC 2 Type 1 certification ?

According to Rankiteo, Ford Romania is not certified under SOC 2 Type 1.

Does Ford Romania have SOC 2 Type 2 certification ?

According to Rankiteo, Ford Romania does not hold a SOC 2 Type 2 certification.

Does Ford Romania comply with GDPR ?

According to Rankiteo, Ford Romania is not listed as GDPR compliant.

Does Ford Romania have PCI DSS certification ?

According to Rankiteo, Ford Romania does not currently maintain PCI DSS compliance.

Does Ford Romania comply with HIPAA ?

According to Rankiteo, Ford Romania is not compliant with HIPAA regulations.

Does Ford Romania have ISO 27001 certification ?

According to Rankiteo,Ford Romania is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ford Romania operate in ?

Ford Romania operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Ford Romania have ?

Ford Romania employs approximately 1 people worldwide.

Does Ford Romania own any subsidiaries ?

Ford Romania presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ford Romania have ?

Ford Romania's official LinkedIn profile has approximately 9,336 followers.

What is the NAICS classification code for Ford Romania ?

Ford Romania is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Ford Romania have a Crunchbase profile ?

No, Ford Romania does not have a profile on Crunchbase.

Does Ford Romania have a LinkedIn profile ?

Yes, Ford Romania maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ford-romania.

How many cybersecurity incidents has Ford Romania experienced ?

As of June 14, 2026, Rankiteo reports that Ford Romania has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Ford Romania have ?

Ford Romania has an estimated 12,970 peer or competitor companies worldwide.

What types of cybersecurity incidents has Ford Romania faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ford Romania

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Ford Romania Vendor Cyber Rating & Cyber Score

ford.ro

Add Your Compliance Badge

Ford Motor Company, companie fondată de către Henry Ford în 1903, este lider global în industria auto, cu peste 200.000 de angajați și 70 de fabrici în întreaga lume. În 2008, Ford a venit în România, preluând Automobile Craiova, uzina pe care a transformat-o într-un centru de producţie de ultimă generaţie. În acești 10 ani, investițiile Ford la Craiova au ajuns la aproape 1,5 miliarde de euro, atât în ceea ce privește producția de mașini, dar și de motoare. În mai 2018, Ford a anunțat o investiție suplimentară la fabrica din Craiova, de aproape 200 de milioane de euro pentru a produce un al doilea model. Noul model se va adăuga producției actualei generații a SUV-ului de clasă mică Ford EcoSport și motorului 1.0 EcoBoost, câștigător al

Ford Romania A.I CyberSecurity Scoring

Scoring History

Ford Romania

Ford Romania CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Ford Romania

Vulnerability

6/2020

FOR412071725

Loading…

A.I.

Ford Romania Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ford Romania

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Ford Romania in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ford Romania in 2026.

Incident Types Ford Romania vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Ford Romania in 2026.

Incident History - Ford Romania (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ford Romania Subsidiaries

Ford Romania

Motor Vehicle Manufacturing

Website: https://www.ford.ro/

Company Size: 201-500 employees

Ford Motor CompanyMotor Vehicle Manufacturing

Ford SwitzerlandMotor Vehicle Manufacturing

Ford MéxicoMotor Vehicle Manufacturing

Ford Pro MéxicoMotor Vehicle Manufacturing

Ford BrasilMotor Vehicle Manufacturing

Ford Pro BrasilMotor Vehicle Manufacturing

Ford Middle EastMotor Vehicle Manufacturing

Ford Business SolutionsMotor Vehicle Manufacturing

Ford ChinaMotor Vehicle Manufacturing

Loading…

Ford Romania Similar Companies

Rivian

cb rivian.com

Doing something different is never easy. It requires courage, optimism and grit. Core to our mission is building a team of adventurous individuals determined to make a positive impact on the world. This means challenging ourselves constantly. Stretching beyond the bounds of conventional thinking. Reframing old problems. Seeking new solutions. And operating comfortably in a space of uncertainty. While our backgrounds are diverse, our team shares a love of the outdoors and a desire to protect it for future generations. Do you like doing the impossible? We’d love to hear from you.

American Honda Motor Company, Inc.

honda.com

We are Honda. A company built on dreams and the determination to make them come true. Driven by our commitment to society and the planet, our work brings joy to our customers and enhances mobility, as we work to help people everywhere expand their life’s potential. Our products, from cars and trucks, to advanced light jets and other forms of mobility, reflect our belief that the purpose of technology is to help people. Together, we are building an inclusive culture where people feel seen and celebrated. Where associates from a variety of backgrounds can apply their unique ideas and experiences to help us create a cleaner, safer, more exciting mobile world. You’re invited to join Honda on this journey. Your individual skills, passion, persistence, innovative mindset and challenging spirit are needed to help Honda Bring the Future. Bring the Future at honda.com/careers

Harley-Davidson Motor Company

harley-davidson.com

In 1903, out of a small shed in Milwaukee, Wisconsin, four young men lit a cultural wildfire that would grow and spread across geographies and generations. Their innovation and imagination for what was possible on two wheels sparked a transportation revolution and lifestyle that would make Harley-Davidson the most desirable motorcycle brand in the world. • Our Mission: More than building machines, we stand for the timeless pursuit of adventure. Freedom for the soul. • Our Vision: Building our legend and leading our industry through innovation, evolution and emotion. Our Mission and Vision honor our past and help define our future. And what we hope you see in these guiding statements is a consumer-led company that’s driven to win, lead and deliver a Harley-Davidson experience that our riders expect and deserve – one where adventure and “freedom for the soul” are the payoff. To do this, we are redefining our culture to reignite the company’s soul and spirit. We are calling our cultural journey “H-D#1” represented by our recognizable #1 logo, introduced in 1969 to celebrate a National Racing Championship. The #1 logo is uniquely ours - an iconic symbol of winning and the hard work it takes to get there. The Hardwire is Harley-Davidson’s 2021-2025 strategic plan guided by our mission and vision. Our plan is targeting long-term profitable growth through focused efforts that extend and strengthen our brand and drive value for all stakeholders. The Hardwire is designed to enhance the desirability of Harley-Davidson and fuel our unique lifestyle brand. For more information, visit our company site: www.harley-davidson.com or our career site: jobs.harley-davidson.com

Marelli

cb marelli.com

Marelli is a global, independent technology partner to the automotive industry, with a strong and established track record in innovation and manufacturing excellence. As mobility is evolving fast and global trends drive unprecedented innovation, we leverage our expertise in integrating software and hardware to position ourselves as key enablers of the Software Defined Vehicle. Our Netiquette: Welcome to the Marelli LinkedIn page! On this LinkedIn Page, Marelli will share the most important news about its technological innovations, Corporate and Motorsport activities, using different kinds of media contents. Each user can participate and share his point of view. The comments are monitored and moderated following specific guidelines that we want to share with you, in order to establish an open and clear relationship with our fanbase. The administrators will participate in the conversations of the community – when the number of interactions allows them to do it – and they’ll respond to the questions of the users, only if these questions are not direct competence of the Marelli Customer Service. We reserve the right to remove comments that: - are not pertinent to the posts of the page; - consist in a violation of user’s privacy (ex. to share a user’s telephone number); - have vulgar, offensive or sexual content; - have the purpose to intimidate or discredit other people, institutions and religions; - violate any user’s rights; - promote illegal activities; - promote products, events or commercial services, even if they’re not direct competitors of Marelli; - have a political, ideological or religious content. In case of disagree among users or between users and administrators of the page, we invite all the members of the community to debate and contribute with respect for all the opinions, following the aim of the page itself. Every user assumes the full responsibility for all the content that he shares on the Marelli LinkedIn page.

Discount Tire

discounttire.com

With more than 1,200 stores in the United States, Discount Tire has grown to become the leading independent retailer of tires and wheels. The company was founded in 1960 when founder Bruce T. Halle rented a building on Stadium Boulevard in Ann Arbor, MI. Although the inventory consisted of only six tires and the showroom was not quite the showroom we see today, faith, vision and hard work were then, and still remain, the foundation on which this company has grown and prospered. As with any new start up, Bruce Halle's venture faced numerous challenges - perhaps one of the biggest being that he didn't own an air compressor. Having only six tires and a portable air tank, Halle would race back and forth to a nearby gas station, filling the tires with air as he sold them. Day by day, tire by tire, this one-man operation slowly grew into what is now one of the most recognized names in the industry. Discount Tire has a vision that not only lives but thrives in the hearts of its employees each and every day. From part-time to full-time employees at the store, regional or corporate level our employees work to be the best in the business. One common thread running through the hearts of everyone within the organization remains the same - treat customers and fellow employees with respect and fairness. Care for those in need, always do what is right, work hard, be responsible and have fun. The employees of Discount Tire represent our philosophy and its brand by remaining knowledgeable, friendly and honest. By offering the highest level of customer service, more product choices and the lowest prices, they have earned the right to be considered trusted experts. Building customer relationships has allowed Discount Tire to become a leader in the industry. Our continual growth not only provides opportunities for employee advancement, but allows more customers to remain confident when choosing us for all of their tire and wheel needs.

Motherson Group

motherson.com

Motherson is a diversified global design, engineering, manufacturing and assembly (DEMA) specialist, delivering full-system solutions to customers across a wide range of industries. With a robust network of 425 state-of-the-art facilities across 44 countries, and a dedicated workforce of more than 200,000 professionals, Motherson is continually working toward its vision of being a globally preferred sustainable solutions provider for its stakeholders. The group recorded revenues of USD 21.2 billion in 2024-25 and is ranked among the top 15 automotive suppliers worldwide. As a trusted partner to OEM customers, Motherson offers an extensive, versatile product portfolio spanning the entire spectrum of the mobility industry. This includes passenger and commercial vehicles, two- and three-wheelers, rolling stock, off-highway vehicles, earthmoving, material-handling and agricultural machinery. Its product range encompasses electrical distribution systems, fully assembled vehicle interior and exterior modules, rear vision systems, moulded plastic parts and assemblies, injection moulding tools, rubber components, lighting systems, and machined metal products. Beyond the automotive sector, Motherson has strategically diversified into industries such as health and medical, aerospace, consumer electronics, logistics, and industrial IT solutions. This expansion reflects the group’s adaptability and unwavering commitment to meeting its customers' evolving needs. Motherson believes its employees are its partners in progress, its biggest asset. The organisation nurtures an environment where employees thrive as dynamic professionals and individuals. The organisation is responsive to its employees' professional aspirations and provides a range of growth opportunities, enabling them to advance professionally and to take on strategic roles within the organisation.

Volvo Trucks

volvotrucks.com

Volvo Trucks supplies complete transport solutions for discerning professional customers with its full range of medium- and heavy-duty trucks. Customer support is provided via a global network of dealers with 2,200 service points in about 130 countries. Volvo trucks are assembled in 12 countries across the globe. In 2024 approximately 134,000 Volvo trucks were delivered worldwide. Volvo Trucks is part of the Volvo Group, one of the world’s leading manufacturers of trucks, buses, construction equipment and marine and industrial engines. The group also provides complete solutions for financing and service. Volvo Trucks’ work is based on the core values of quality, safety and environmental care.

Bridgestone Americas

cb bridgestoneamericas.com

Bridgestone Americas, Inc. (BSAM), headquartered in Nashville, Tennessee, and Bridgestone Europe, Middle East and Africa (BSEMEA), headquartered in Brussels, Belgium, operate collectively as a “Bridgestone West” strategic region. This region services the strategic business needs of teams across the Americas, Europe, Middle East and Africa. BSAM and BSEMEA are subsidiaries of Bridgestone Corporation, globally headquartered in Japan. Bridgestone and its subsidiaries develop, manufactures and markets a diverse portfolio of original equipment and replacement tires, tire-centric solutions, mobility solutions and other rubber-associated and diversified products that deliver social and customer value. These best-in-class offerings are sold to consumers and fleet customers around the world under the trusted Bridgestone and Firestone brand names. With more than 50 production facilities and 55,000 employees, the Bridgestone Americas (BSAM) enterprise spans from Canada to Argentina. Business units of Bridgestone Americas include Bridgestone Retail Operations, the world’s largest network of company-owned retail tire and automotive service centers; Bandag, a leader in commercial tire retreading worldwide and Firestone Industrial Products, a leading provider of technologically advanced air springs for commercial and passenger vehicle applications. At Bridgestone, you are Free to Be We believe people can only provide superior service and quality to others when they bring their whole self to work. We believe in championing all perspectives, individuals and teams because we understand the importance of seeing the world and our business through many different lenses. We are building a team as diverse as the world we serve. So, show us what you are made of, because who you are is what we need. To view our terms of use, visit https://www.bridgestoneamericas.com/en/terms-of-use.

Hero MotoCorp

heromotocorp.com

Hero MotoCorp, the world’s largest two-wheeler company, is shaping the future of mobility for over 125 million riders across 48 countries. Our story began in 1984, founded by the visionary Chairman Emeritus, Dr. Brijmohan Lall Munjal, with a bold vision: to make mobility accessible and aspirational for millions. Under the dynamic leadership of Executive Chairman, Dr. Pawan Munjal, we have grown into a global force in innovation, sustainability, and purpose-driven growth. Driven by our vision to ‘Be the Future of Mobility,’ we are innovating for tomorrow with our emerging mobility brand, VIDA, and groundbreaking innovations like the Surge S32, recognized as one of TIME's Best Inventions of 2024. With world-class R&D hubs in India and Germany, and advanced green manufacturing across three countries, we’re building more than machines. We’re building momentum for the planet. From icons like Splendor and Karizma to our premium collaboration with Harley-Davidson, we deliver performance with purpose. Our commitment to sustainability runs deep - we've achieved zero waste-to-landfill and 455% water positivity, and our DJSI (Dow Jones Sustainability Index) recognition reflects our dedication to doing business the right way. Recognized by TIME as the World’s Best Organizations (2024) and Asia Pacific’s Best Companies (2025), we are an organization driven by values and powered by people. Hero MotoCorp is more than a workplace; it’s a launchpad for your boldest ambitions. Join us. Create. Collaborate. Inspire. Come, be the future of mobility.

Loading…

NEWS

Ford Romania CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 30, 2024 07:00 AM

Keeping Those on the Front Lines of Change Safe: Five Years of the Ford Foundation Grantee Safety Program

Learn how Ford Foundation strengthens grantee cybersecurity and physical safety to build a more just and resilient social justice ecosystem.

Read Article

March 14, 2022 07:00 AM

Ford to sell Romanian plant to Turkish JV

Ford Motor Co's Turkish joint venture will buy the U.S. company's Craiova plant in Romania for 575 million euros ($630 million) and plans to...

Read Article

December 20, 2021 08:00 AM

Ford has spent $2bn on Craiova plant

Ford investments in the Craiova assembly plant in Romania since 2009 total US$2bn (EUR1.77bn), the company said.

Read Article

October 09, 2019 07:00 AM

Ford starts Puma build in Romania

Ford Motor Company has started production of the Puma crossover model at its assembly plant in Craiova. In order to support production of...

Read Article

September 01, 2018 12:32 AM

Careers at EY | EY - Global

We're shapers of the future. We're change agents and cyber professionals. Performance improvers and problem solvers. Data scientists and growth hackers.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…