HH
Company Details
Linkedin ID:
holidays-for-the-heroes
Employees number:
3
Number of followers:
467
NAICS:
561
Industry Type:
Homepage:
holidaysfortheheroes.org
IP Addresses:
0
Company ID:
HOL_1923185
Scan Status:
In-progress
Holidays For The Heroes Company CyberSecurity Posture
holidaysfortheheroes.org
We are a 501c3 Corporation that flies active duty military service members Home for the Holidays! Founded in 2020, we have flown nearly 70 active duty Army, Navy, Air Force, Marine and Coast Guard men and women home from around the world. We solicit for donations for full ticket sponsorships as well as smaller donations that we bundle together to purchase round trip air fare. 100% of all donations will be used to fly our heroes home!
Holidays For The Heroes A.I CyberSecurity Scoring
HH Risk Score (AI oriented)Between 750 and 799
HH
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
HH Global Score (TPRM)XXXX
HH
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
HH Company CyberSecurity News & History
Past Incidents
0
Attack Types
0
No data available
HH Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for HH
Incidents vs Fundraising Industry Average (This Year)
No incidents recorded for Holidays For The Heroes in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for Holidays For The Heroes in 2025.
Incident Types HH vs Fundraising Industry Avg (This Year)
No incidents recorded for Holidays For The Heroes in 2025.
Incident History — HH (X = Date, Y = Severity)
HH cyber incidents detection timeline including parent company and subsidiaries
HH Company Subsidiaries
We are a 501c3 Corporation that flies active duty military service members Home for the Holidays! Founded in 2020, we have flown nearly 70 active duty Army, Navy, Air Force, Marine and Coast Guard men and women home from around the world. We solicit for donations for full ticket sponsorships as well as smaller donations that we bundle together to purchase round trip air fare. 100% of all donations will be used to fly our heroes home!
Loading...
HH Similar Companies
Project Heart
Project Heart is dedicated to funding research for congenital heart disease and supporting families of children with heart defects. Project Heart is a not for profit medical research and development organization whose sole mission is to cure CHD. We are creating a path to fund and advance the resea
United Way of Portage County
United Way of Portage County is an independently-governed 501(c)3 nonprofit organization connected to a network of more than 1,400 local United Ways through United Way Worldwide. We have our own board of directors and focus our work creating long-lasting changes by addressing the underlying causes o
United Way of Greater Plymouth County
OUR MISSION... We unite people, ideas and resources to improve lives. OUR VISION... We envision a safe, healthy and well educated community where peoples' needs are met effectively, respectfully and compassionately. United Way of Greater Plymouth County focuses on the vital and interconne
Oklahoma Wonder Grants
WHAT IS THE OKLAHOMA WONDER GRANT? The Oklahoma Wonder Grant is a program designed to seed innovation in Oklahoma businesses, non-profits and public organizations, challenging them to look for new ways to solve problems. What started as one grant focused on augmented/virtual reality has evolved int
WagAware
The WagAware Ambassador Charm is the first and only dog charm supporting dog rescue and adoption nationwide. Simply by wearing a WagAware Ambassador Charm, your dog is actively advocating for the adoption of fellow canines in need of loving, forever homes. Plus, WagAware puts its money where its
QSP
Since 1964, QSP has helped students raise over 3 billion dollars in profits for enrichment programs and worthwhile projects that are vital to a meaningful, well-rounded education. With QSP programs, students apply practical lessons in goal setting, planning, organization and teamwork - important fac
.png)
HH CyberSecurity News
December 02, 2025 08:00 AM
Youth Villages launches holiday heroes campaign to support children in foster care
Youth Villages, a nonprofit serving children with emotional and behavioral needs, many of whom are touched by the child welfare system,...
November 24, 2025 07:38 PM
HSToday Holiday Hero Awards 2025: National Awardees
The Homeland Security Today awards annually recognize the people who devote their lives to protecting our people, our resources,...
November 20, 2025 08:00 AM
HSToday Holiday Hero Awards 2025: Mission Awardees
Each year, Homeland Security Today honors shining stars in the community who are making their own unique, invaluable contributions to...
November 18, 2025 08:00 AM
Avangrid Honored for Excellence in Information Sharing by Homeland Security Today
Avangrid recognized with GTSC's (The Government Technology & Services Coalition) Homeland Security Today's 2025 Holiday Hero Award.
November 11, 2025 08:00 AM
GTSC’s Homeland Security Today Announces 2025 Holiday Hero Award Winners
Washington, D.C., November 11 — Homeland Security Today, the premier non-profit information source for homeland security news, analysis,...
November 05, 2025 08:00 AM
Holiday for Heroes campaign launched by the American Red Cross
The American Red Cross of North and Central Florida has launched its annual Holiday for Heroes campaign, inviting the community to donate...
November 04, 2025 08:00 AM
Staples Canada Delivers Holiday Relief as New Survey Reveals 82% of Parents, Teachers and Small Business Owners Struggle to Keep Up with Holiday To-Do Lists
Holiday Heroes Contest Awards $50K to Help Make the Season EASY for Canadians. RICHMOND HILL, ON, Nov. 4, 2025 /CNW/ - As Canadians prepare...
October 16, 2025 07:00 AM
‘Midnight In The War Room’ And The Unsung Heroes Of Cybersecurity
"Midnight in the War Room" reveals the unseen heroes of cybersecurity—CISOs and defenders fighting a digital cold war to keep the modern...
April 02, 2025 04:09 AM
Day of Communications and Cybersecurity Troops of the Armed Forces of Ukraine: history and significance of the holiday
Every year on August 8, Ukraine celebrates the Day of Communications Troops. These units are an important part of the Armed Forces of Ukraine.
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
HH CyberSecurity History Information
Official Website of Holidays For The Heroes
The official website of Holidays For The Heroes is http://www.HolidaysForTheHeroes.org.
Holidays For The Heroes’s AI-Generated Cybersecurity Score
According to Rankiteo, Holidays For The Heroes’s AI-generated cybersecurity score is 755, reflecting their Fair security posture.
How many security badges does Holidays For The Heroes’ have ?
According to Rankiteo, Holidays For The Heroes currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does Holidays For The Heroes have SOC 2 Type 1 certification ?
According to Rankiteo, Holidays For The Heroes is not certified under SOC 2 Type 1.
Does Holidays For The Heroes have SOC 2 Type 2 certification ?
According to Rankiteo, Holidays For The Heroes does not hold a SOC 2 Type 2 certification.
Does Holidays For The Heroes comply with GDPR ?
According to Rankiteo, Holidays For The Heroes is not listed as GDPR compliant.
Does Holidays For The Heroes have PCI DSS certification ?
According to Rankiteo, Holidays For The Heroes does not currently maintain PCI DSS compliance.
Does Holidays For The Heroes comply with HIPAA ?
According to Rankiteo, Holidays For The Heroes is not compliant with HIPAA regulations.
Does Holidays For The Heroes have ISO 27001 certification ?
According to Rankiteo,Holidays For The Heroes is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of Holidays For The Heroes
Holidays For The Heroes operates primarily in the Fundraising industry.
Number of Employees at Holidays For The Heroes
Holidays For The Heroes employs approximately 3 people worldwide.
Subsidiaries Owned by Holidays For The Heroes
Holidays For The Heroes presently has no subsidiaries across any sectors.
Holidays For The Heroes’s LinkedIn Followers
Holidays For The Heroes’s official LinkedIn profile has approximately 467 followers.
Holidays For The Heroes’s Presence on Crunchbase
No, Holidays For The Heroes does not have a profile on Crunchbase.
Holidays For The Heroes’s Presence on LinkedIn
Yes, Holidays For The Heroes maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/holidays-for-the-heroes.
Cybersecurity Incidents Involving Holidays For The Heroes
As of December 21, 2025, Rankiteo reports that Holidays For The Heroes has not experienced any cybersecurity incidents.
Number of Peer and Competitor Companies
Holidays For The Heroes has an estimated 1,146 peer or competitor companies worldwide.
Holidays For The Heroes CyberSecurity History Information
How many cyber incidents has Holidays For The Heroes faced ?
Total Incidents: According to Rankiteo, Holidays For The Heroes has faced 0 incidents in the past.
What types of cybersecurity incidents have occurred at Holidays For The Heroes ?
Incident Types: The types of cybersecurity incidents that have occurred include .
Incident Details
What are the most common types of attacks the company has faced ?
Additional Questions
.png)
Latest Global CVEs (Not Company-Specific)
Description
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.
Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.
Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L104
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L94
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3420841%40ajax-search-for-woocommerce%2Ftrunk&old=3398612%40ajax-search-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=#file136
- https://wordpress.org/plugins/ajax-search-for-woocommerce
- https://www.wordfence.com/threat-intel/vulnerabilities/id/8149103e-105d-401d-8a15-b07d131baaac?source=cve
Description
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/class-functions.php#L41
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-ajax-common.php#L61
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L205
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L2795
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/templates/members.php#L26
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3421362%40ultimate-member%2Ftrunk&old=3408617%40ultimate-member%2Ftrunk&sfp_email=&sfph_mail=
- https://www.wordfence.com/threat-intel/vulnerabilities/id/61337d2d-d15a-45f2-b730-fc034eb3cd31?source=cve
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=holidays-for-the-heroes' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
