What is the official website of Ooredoo Kuwait ?

The official website of Ooredoo Kuwait is http://www.ooredoo.com.kw.

What is Ooredoo Kuwait's cybersecurity risk score?

Ooredoo Kuwait has an AI-generated cybersecurity risk score of 843 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Ooredoo Kuwait experienced?

According to Rankiteo, Ooredoo Kuwait currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ooredoo Kuwait been affected by any supply chain cyber incidents ?

According to Rankiteo, Ooredoo Kuwait has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Ooredoo Kuwait have SOC 2 Type 1 certification ?

According to Rankiteo, Ooredoo Kuwait is not certified under SOC 2 Type 1.

Does Ooredoo Kuwait have SOC 2 Type 2 certification ?

According to Rankiteo, Ooredoo Kuwait does not hold a SOC 2 Type 2 certification.

Does Ooredoo Kuwait comply with GDPR ?

According to Rankiteo, Ooredoo Kuwait is not listed as GDPR compliant.

Does Ooredoo Kuwait have PCI DSS certification ?

According to Rankiteo, Ooredoo Kuwait does not currently maintain PCI DSS compliance.

Does Ooredoo Kuwait comply with HIPAA ?

According to Rankiteo, Ooredoo Kuwait is not compliant with HIPAA regulations.

Does Ooredoo Kuwait have ISO 27001 certification ?

According to Rankiteo,Ooredoo Kuwait is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ooredoo Kuwait operate in ?

Ooredoo Kuwait operates primarily in the Telecommunications industry.

How many employees does Ooredoo Kuwait have ?

Ooredoo Kuwait employs approximately 1,735 people worldwide.

Does Ooredoo Kuwait own any subsidiaries ?

Ooredoo Kuwait presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ooredoo Kuwait have ?

Ooredoo Kuwait's official LinkedIn profile has approximately 96,518,055,559,652,235,416,698,880 followers.

Does Ooredoo Kuwait have a Crunchbase profile ?

No, Ooredoo Kuwait does not have a profile on Crunchbase.

Does Ooredoo Kuwait have a LinkedIn profile ?

Yes, Ooredoo Kuwait maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ooredoo-in-kuwait.

How many cybersecurity incidents has Ooredoo Kuwait experienced ?

As of June 15, 2026, Rankiteo reports that Ooredoo Kuwait has not experienced any cybersecurity incidents.

How many peer or competitor companies does Ooredoo Kuwait have ?

Ooredoo Kuwait has an estimated 10,194 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ooredoo Kuwait

Boost Score +25 with badge (5 left)

843

/1000

Good

868

/1000

Very Good

Ooredoo Kuwait Vendor Cyber Rating & Cyber Score

ooredoo.com.kw

Add Your Compliance Badge

Ooredoo is a leading international communications company delivering mobile, fixed, broadband internet and corporate managed services tailored to the needs of consumers and businesses across markets in the Middle East, North Africa and South-East Asia. As a community-focused company, Ooredoo is guided by its vision of enriching people’s lives and its belief that it can stimulate human growth by leveraging communications to help people achieve their full potential. Ooredoo has a presence in markets such as Qatar, Kuwait, Oman, Algeria, Tunisia, Iraq, Palestine, the Maldives and Indonesia. The company was named “Best Mobile Operator of the Year” at the World Communication Awards 2013. The company reported revenues of US$9.3 billion in

Ooredoo Kuwait A.I CyberSecurity Scoring

Scoring History

Ooredoo Kuwait

Ooredoo Kuwait CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Ooredoo Kuwait Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ooredoo Kuwait

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for Ooredoo Kuwait in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ooredoo Kuwait in 2026.

Incident Types Ooredoo Kuwait vs Telecommunications Industry Avg (This Year)

No incidents recorded for Ooredoo Kuwait in 2026.

Incident History - Ooredoo Kuwait (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ooredoo Kuwait Subsidiaries

Ooredoo Kuwait

Telecommunications

Website: http://www.ooredoo.com.kw

Company Size: 1,735

Ooredoo GroupTelecommunications

PT. Indosat TbkTelecommunications

Ooredoo AlgerieTelecommunications

Ooredoo TunisieTelecommunications

Asiacell Communications PJSCTelecommunications

Ooredoo MaldivesTelecommunications

Ooredoo MyanmarTelecommunications

Wataniya Mobile PalestineTelecommunications

Ooredoo Kuwait Businessاتصالات

Loading…

Ooredoo Kuwait Similar Companies

EE

ee.co.uk

EE, part of BT Group, is the largest and most advanced mobile communications company in the UK, delivering mobile and fixed communications services to consumers. We run the UK's biggest and fastest mobile network, having pioneered the UK's first superfast 4G mobile service in October 2012 and was the first European operator to surpass 14 million 4G customers in December 2015. We have more than 550 shops across the UK and we’re dedicated to making EE an outstanding place to work for our 13,000 employees. Our 4G coverage reaches 80% of the UK geography and we have plans to extend 4G geographic coverage to 95% by 2020. We’ve received extensive independent recognition, including being ranked the UK's best overall network by RootMetrics®; Best Network at the 2015, 2016 and 2017 Mobile News Awards; Best Network at the Mobile Choice Consumer Awards 2016; Best Consumer Network at the 2015 & 2016 Mobile Industry Awards; as well as Fastest Network and Best Network Coverage at the 2017 uSwitch Mobile Awards.

airtel

airtel.com

Airtel was founded to provide global connectivity and unlock endless opportunities. Our organization embodies a unique blend of energy, innovation, creativity, dedication, scale, and ownership, all aimed at being limitless. At Airtel, we strive to go beyond our duties to create impactful solutions for our consumers. Our team is highly skilled and constantly growing, actively developing infrastructure to introduce cutting-edge technologies like 5G, IoT, IQ, and Airtel Black. We have successfully launched 5G services in over 5,000 cities and towns nationwide, with 10 million unique customers on the 5G network nationally. Airtel Black is another convenient consumer service that provides combined billing for family and friends under a single bill. We also offer enterprise solutions, including national and international long-distance services for carriers. With a subscriber base exceeding 574 million as of 2023, we are committed to delivering effective products that contribute to the realization of a 'Digital India', enabling millions of individuals to connect and thrive for a brighter future. Our presence spans 7,915 census and 802,577 non-census towns and villages, covering almost 96% of the country's population with 388,726 Rkms of optical fiber and an extensive distribution network of 1.2 million outlets. We've also implemented conservation initiatives that have saved 14,676 MWh of electricity, 4412 tonnes of paper through our e-bill initiatives, and recycled 3330 tonnes of e-waste. At Airtel, we believe in taking early ownership, delivering quality, and experimenting with various career paths to boost our trajectories and gain valuable insights into the business, making us the best in the industry. We are committed to creating the ultimate experience for our consumers while maintaining an ecological balance in the world.

e& Egypt

eand.com.eg

Building on 17 years of technology excellence in the Egyptian market, and in our relentless quest to bring you more and better services, etisalat by e& in Egypt has now evolved into the digital telco of the future. Covering and serving 99% of the inhabited areas in Egypt, our mission as etisalat by e& in Egypt is to continuously grow and transform to empower our customers by enhancing their digital experience and ensuring operation agility. etisalat by e& in Egypt offers digital experiences that cater to your ever-changing lifestyle and ever-expanding demands – covering not only telecom, but a wide collection of services that suit your various needs. We will continue to be your trusted companion and consultant, enabling connectivity and everything beyond, accelerating the digital world and pioneering future-forward spaces. Together, as we embark on this new era of etisalat by e& in Egypt, we make possible countless connections across continents and create the limitless possibilities of tomorrow, today. etisalat by e& in Egypt #MakePossible بعد ١٥ سنة من تفوقنا التكنولوجي في مصر، ولإننا حابين نقدم خدمات كتيرة عالية الجودة لكل عملائنا، جه الوقت إللي نطور في “اتصالات من &e في مصر” وندخل المستقبل الرقمي من أوسع الأبواب! شبكتنا النهاردة بتغطي ۹۹% من مناطق مصر، وبنطور يوم ورا يوم عشان نوصل رسالتنا بالنمو والتحول والتفوق، كل دا عشان نوفر لعملائنا أفضل تجربة رقمية، ونسرع العملية التشغيلية. النهاردة في “اتصالات من &e في مصر” إحنا جاهزين نقدملكم خدمات رقمية جديدة تسهلكو حياتكم اليومية، ومع خدمة المكالمات التقليدية، حنوفرلكم خدمات تانية كتير! لإننا بجد شريكم الموثوق، إللي بيخليكم على تواصل، وبياخدكم للمستقبل عبر تسريع الاقتصاد الرقمي والريادة. مع “اتصالات من &e في مصر” حنبدأ مع بعض عصر جديد، ونقربكم من بعض عبر القارات، ومع بعض حنكتشف إمكانيات بكرة اللامحدودة من النهاردة. “اتصالات من &e في مصر” ... معانا #makepossible

Reliance Communications

rcom.co.in

Reliance Communications Limited, founded by the late Shri Dhirubhai H Ambani (1932-2002), has Corporate clientele that includes 40,000 Indian and multinational corporations, including small and medium enterprises. Reliance Communications has established a pan-India, Next-Generation, digital network that is capable of supporting best-of-class services spanning the entire communications value chain. Reliance Communications owns and operates the world's largest Next-Generation IP-enabled connectivity infrastructure, comprising fiber optic cable systems in India, the USA, Europe, Middle East and the Asia Pacific region.

A1 Telekom Austria Group

a1.group

WE ARE EMPOWERING DIGITAL LIFE We don't know what the world will look like in 2050, but we know that A1 Telekom Austria Group is geared up for current and future demands. We are a leading provider of digital services and communications solutions in Central and Eastern Europe, offering a state-of-the art network infrastructure as well as empowering digitalization. 19.000 of our employees and modern broadband infrastructure make digital business and lifestyle possible as well as enable more than 24 mio users to connect everywhere anytime. Our purpose is to Empower Digital Life in areas of communications, payment, entertainment services and integrated business solutions. We do this together with our operating companies in 7 European countries: Austria, Bulgaria, Croatia, Slovenia, Belarus, Republic of Serbia and Republic of North Macedonia. Headquartered in Vienna and listed on the Vienna Stock Exchange, the A1 Telekom Austria Group is an European unit of América Móvil, one of the world´s largest wireless services providers. You can also follow us here: https://twitter.com/TA_Group Find out more about us as an employer on https://jobs.a1.com/

Idea Cellular Ltd

cb ideacellular.com

Idea Cellular is an Aditya Birla Group Company, India's first truly multinational corporation. Idea is a pan-India integrated GSM operator offering 2G and 3G services, and has its own NLD and ILD operations, and ISP license. With revenue in excess of $4 billion; revenue market share of 18%; and subscriber base of over 150 million, Idea is India’s 3rd largest mobile operator. Idea ranks among the Top 10 country operators in the world with a traffic of over 1.5 billion minutes a day. Idea’s robust pan-India coverage is built on a network of over 100,000 2G and 3G cell sites, spread across over 55,000 towns in India. Using the latest in technology, Idea provides world-class service delivery through the most extensive network of customer touch points, comprising of nearly 4,500 exclusive Idea outlets, and over 7,000 call centre seats. Idea’s customer service delivery platform is ISO 9001:2008 certified, making it the only operator in the country to have this standard certification for all 22 service areas and the corporate office Idea won the ‘Best Brand Campaign’ at the esteemed World Communication Awards 2011. It also recently won 3 Awards at the ET Telecom Awards 2012, in the following categories Customer Experience Enhancement, Excellence in Marketing and Innovative products, respectively.

ZTE Corporation

zte.com.cn

ZTE connects the world with continuous innovation for a better future. The company provides innovative technologies and integrated solutions, and its portfolio spans communication networks, computing infrastructure, industry digital solutions, and personal and home smart terminals. Serving one third of the world's population, ZTE is dedicated to leading globally in connectivity and intelligent computing, enabling communication and trust everywhere. ZTE is listed on both the Hong Kong and Shenzhen Stock Exchanges. For enquiry about our mobile devices, please contact us via [email protected] For network services, please contact our 24/7 support hotline: 0086-755-26771900 or email: [email protected] https://twitter.com/ZTEPress https://www.facebook.com/ZTECorp https://youtube.com/@ZTECorporation

Telemont

telemont.com.br

Fundada em 1975, a Telemont Engenharia de Telecomunicações S/A é líder na prestação de serviços de implantação, manutenção e operação de redes de telecomunicações. São 7,7 milhões de acessos de voz, 3 milhões de ADSL e dados e 63 mil km de fibra óptica operados pela empresa. Através da Telemont IT - Integração e Tecnologia - a empresa também oferece serviços de tecnologia da informação. Esta unidade de negócios tem o objetivo de complementar os serviços já oferecidos, baseada na expertise de quem já tem 39 anos de mercado e está presente em mais de 15 estados do país. Apesar dessa amplitude territorial, a Telemont tem princípios e valores únicos que norteiam todos os seus colaboradores no dia a dia: A segurança no trabalho, clientes permanentemente satisfeitos, a busca contínua do melhor resultado de forma sustentável, ser um time de alta performance, respeito e simplicidade, excelência em gente e inovação.

Jazz

jazz.com.pk

Pakistan’s number one digital operator and the largest internet and broadband service provider with over 70 million subscribers nationwide. With a legacy of more than 27 years, Jazz maintains market leadership through cutting-edge, integrated technology, the strongest brands and the largest portfolio of value added services in the industry. Housing a nation-wide network of contact centers and an unparalleled fibre optic backbone of more than 25,000 kilometers, Jazz has already invested billions of dollars in the country to date. It also provides uninterrupted countrywide connectivity, unmatched customer services and international roaming in over 150 countries. As a responsible entity, the company passionately supports education, health and environmental initiatives and promotes sustainable business practices. Jazz offers exclusive & personalized tariff plans that empower customers and cater to the communication needs of a diverse group of people, from individuals to businessmen to corporate and multinationals. Through its innovative services and products, Jazz is set to bring about a digital revolution that will enable and transform societies towards a more progressive Pakistan.

Loading…

NEWS

Ooredoo Kuwait CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 22, 2025 01:31 PM

Ooredoo and Darktrace sign strategic partnership to enhance AI-enabled cybersecurity for enterprises

A major milestone in Ooredoo's mission to deliver next-generation, AI-enabled cybersecurity services to organisations across Qatar.

Read Article

December 17, 2025 01:22 AM

Scale Computing, Bitdefender Deliver Integrated Cybersecurity for Edge and Private Cloud

Scale Computing, a market leader in edge computing, virtualization, and hyperconverged infrastructure, announced a strategic partnership with Bitdefender,...

Read Article

December 16, 2025 02:39 PM

Alasconnect Partners with Cynet to Offer Affordable Cybersecurity to Alaskan Businesses

Alasconnect, an Alaska-based managed IT and cybersecurity firm and a subsidiary of MTA, is expanding its commitment to local businesses by partnering with...

Read Article

September 30, 2025 07:00 AM

Ooredoo deploys advanced cybersecurity services in MENA

Ooredoo Group has partnered with Innovatix Systems to deploy advanced cybersecurity services in the Middle East and North Africa (MENA).

Read Article

September 30, 2025 07:00 AM

Ooredoo Rolls Out Advanced Cybersecurity Across Global Markets

Ooredoo partners with Innovatix Systems to deliver defense-grade cybersecurity services. The partnership delivers 24/7 protection,...

Read Article

September 29, 2025 07:00 AM

Ooredoo Partners with Innovatix to Launch Advanced Cybersecurity Services Across Its Markets

The new services are designed to protect customers' digital assets with security embedded from the start, ensuring smooth,...

Read Article

September 02, 2025 07:00 AM

Qatar Airways And Ooredoo Launch Groundbreaking Partnership To Propel Qatar Into The Global Spotlight For Artificial Intelligence, Cloud Computing, And Cybersecurity Innovation

Qatar Airways and Ooredoo have launched a groundbreaking partnership focused on advancing Artificial Intelligence (AI), Cloud computing,...

Read Article

September 01, 2025 07:00 AM

Qatar’s Digital Future: Ooredoo and Qatar Airways Launch AI Hub to Boost Tourism, Technology and Cybersecurity

Ooredoo and Qatar Airways partner to create an AI hub in Qatar, boosting cloud, cybersecurity, and digital innovation, while enhancing...

Read Article

July 02, 2025 07:00 AM

Internet Access in Kuwait (2025 Comprehensive Report)

Kuwait boasts near-universal internet access, with approximately 4.29 million internet users (99% of the population) as of early 2024.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…