Comparison Overview
MR PORTER
MR PORTER
1 The Village Offices, London, London, GB, W12 7GF
Last Update: 27/02/2026
MR PORTER is the men’s luxury style destination. Since 2011, it has offered customers a curated assortment of fashion, fine watches, grooming and lifestyle products from the world’s most coveted designers. It delivers exceptional quality with private label, Mr P., and m...
Macy's
151 W 34th St, New York, 10001, US
Last Update: 04/04/2026
Macy's is America’s store for life. The largest retail brand of Macy's, Inc. (NYSE:M) delivers quality fashion at affordable prices to customers at approximately 640 locations in 43 states, the District of Columbia, Puerto Rico, and Guam, as well as to customers in more...
Compliance Ranges Comparison
MR PORTER
Macy's
Benchmark & Cyber Underwriting Signals
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for MR PORTER in 2026.
Incidents vs Retail Industry Avg (This Year)
No incidents recorded for Macy's in 2026.
Incident History - MR PORTER (X = Date, Y = Severity)
MR PORTER cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Macy's (X = Date, Y = Severity)
Macy's cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
MR PORTER
Macy's
FAQ
Latest Global CVEs
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth extension allows Stored XSS. This issue affects Mediawiki - CentralAuth extension: before 1.46.1, 1.45.5, 1.43.10.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Wikimedia Foundation MediaWiki - WikiLambda extension allows Stored XSS. This issue affects MediaWiki - WikiLambda extension: before 1.46.1.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Refreshed skin allows Stored XSS. This issue affects Mediawiki - Refreshed skin: before 1.46.1, 1.45.5, 1.43.10.
XML injection (aka blind XPath injection) vulnerability in The Wikimedia Foundation Mediawiki - EasyTimeline extension allows XML Injection. This issue affects Mediawiki - EasyTimeline extension: before 1.46.1, 1.45.5, 1.43.10.
anchorme through 3.0.8 contains a regular expression denial of service vulnerability in the IPv6 host extraction regex due to catastrophic backtracking. Attackers can supply specially crafted input strings with repeated patterns to cause exponential regex engine backtracking, blocking the Node.js event loop and denying service to other requests.
- https://gist.github.com/mmadersbacher/46050b4224eb979431986cdef1dd2ad3
- https://github.com/alexcorvi/anchorme.js
- https://github.com/alexcorvi/anchorme.js/blob/f3ae9850baa344f27b46bb149e9b891831d273b1/src/index.ts#L109
- https://www.npmjs.com/package/anchorme
- https://www.vulncheck.com/advisories/anchorme-through-3.0.8-regular-expression-denial-of-service