What is the official website of Rewilded Retreats ?

The official website of Rewilded Retreats is www.rewildedretreats.com.

What is Rewilded Retreats's cybersecurity risk score?

Rewilded Retreats has an AI-generated cybersecurity risk score of 766 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Rewilded Retreats experienced?

According to Rankiteo, Rewilded Retreats currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Rewilded Retreats been affected by any supply chain cyber incidents ?

According to Rankiteo, Rewilded Retreats has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Rewilded Retreats have SOC 2 Type 1 certification ?

According to Rankiteo, Rewilded Retreats is not certified under SOC 2 Type 1.

Does Rewilded Retreats have SOC 2 Type 2 certification ?

According to Rankiteo, Rewilded Retreats does not hold a SOC 2 Type 2 certification.

Does Rewilded Retreats comply with GDPR ?

According to Rankiteo, Rewilded Retreats is not listed as GDPR compliant.

Does Rewilded Retreats have PCI DSS certification ?

According to Rankiteo, Rewilded Retreats does not currently maintain PCI DSS compliance.

Does Rewilded Retreats comply with HIPAA ?

According to Rankiteo, Rewilded Retreats is not compliant with HIPAA regulations.

Does Rewilded Retreats have ISO 27001 certification ?

According to Rankiteo,Rewilded Retreats is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Rewilded Retreats operate in ?

Rewilded Retreats operates primarily in the Wellness and Fitness Services industry.

How many employees does Rewilded Retreats have ?

Rewilded Retreats employs approximately 237 people worldwide.

Does Rewilded Retreats own any subsidiaries ?

Rewilded Retreats presently has no subsidiaries across any sectors.

How many LinkedIn followers does Rewilded Retreats have ?

Rewilded Retreats's official LinkedIn profile has approximately 4,737 followers.

What is the NAICS classification code for Rewilded Retreats ?

Rewilded Retreats is classified under the NAICS code 71394, which corresponds to Fitness and Recreational Sports Centers.

Does Rewilded Retreats have a Crunchbase profile ?

No, Rewilded Retreats does not have a profile on Crunchbase.

Does Rewilded Retreats have a LinkedIn profile ?

Yes, Rewilded Retreats maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/rewildedretreats.

How many cybersecurity incidents has Rewilded Retreats experienced ?

As of June 14, 2026, Rankiteo reports that Rewilded Retreats has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Rewilded Retreats have ?

Rewilded Retreats has an estimated 12,332 peer or competitor companies worldwide.

What types of cybersecurity incidents has Rewilded Retreats faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Rewilded Retreats

Boost Score +25 with badge (5 left)

766

/1000

Fair

791

/1000

Fair

Rewilded Retreats Vendor Cyber Rating & Cyber Score

rewildedretreats.com

Add Your Compliance Badge

Rewilded Retreats is a boutique venue for immersive nature connection retreats, within the idyllic village of Bonsall, The Peak District. We offer a range of getaways, crafted to your individual or team’s needs. Choose from a range of activities, such as guided foraging walk, mindful work with horses, wild cooking and pottery making, or indulging in some much needed relaxation with a soothing massage. And much more. We offer all inclusive packages with delicious, local and sustainable menu options and charming country cottage accommodation for up to 12 people.

Rewilded Retreats A.I CyberSecurity Scoring

Scoring History

Rewilded Retreats

Rewilded Retreats CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Rewilded Retreats

Breach

100

6/2011

EPS153827123

Rewilded Retreats

Breach

4/2011

EPS458072625

Loading…

A.I.

Rewilded Retreats Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Rewilded Retreats

Incidents vs Wellness and Fitness Services Industry Avg (This Year)

No incidents recorded for Rewilded Retreats in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Rewilded Retreats in 2026.

Incident Types Rewilded Retreats vs Wellness and Fitness Services Industry Avg (This Year)

No incidents recorded for Rewilded Retreats in 2026.

Incident History - Rewilded Retreats (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Rewilded Retreats Subsidiaries

Rewilded Retreats

Wellness and Fitness Services

Website: www.rewildedretreats.com

Company Size: 237

Leo BurnettAdvertising Services

Publicis GroupeAdvertising Services

Saatchi & SaatchiAdvertising Services

Saatchi & Saatchi SynergizeAdvertising Services

F/Nazca Saatchi & SaatchiAdvertising Services

Team OneAdvertising Services

Saatchi & Saatchi SingaporeAdvertising Services

Saatchi & Saatchi IndiaAdvertising Services

Saatchi & Saatchi (We Are Saatchi)Advertising Services

Saatchi & Saatchi XAdvertising Services

EpsilonAdvertising Services

Catapult MarketingAdvertising Services

Epsilon APACAdvertising Services

Epsilon EMEAAdvertising Services

Epsilon Alumni (Official)Advertising Services

Epsilon LATAMAdvertising Services

StarcomAdvertising Services

Starcom AustraliaAdvertising Services

Digitas North AmericaAdvertising Services

(m)PHASIZEAdvertising Services

Publicis Re:SourcesAdvertising Services

Digitas UKAdvertising Services

MSL (Global)Public Relations and Communications Services

MSL IndiaPublic Relations and Communications Services

Women's Forum for the Economy & SocietyInternational Affairs

MSL UKAdvertising Services

Publicis ConsultantsPublic Relations and Communications Services

PublicisLiveEvents Services

Espalhe MSLAdvertising Services

JKLPublic Relations and Communications Services

MSL Group CanadaPublic Relations and Communications Services

20:20 MSLPublic Relations and Communications Services

ECA2 SHOW DESIGN & PRODUCTIONEntertainment Providers

20:20 MEDIAPublic Relations and Communications Services

MSLGROUP ChinaPublic Relations and Communications Services

MSLGROUP Corporate & Brand Citizenship/PurPlePublic Relations and Communications Services

Capital MSL Middle EastPublic Relations and Communications Services

Capital MSLPublic Relations and Communications Services

Winner & AssociatesPublic Relations and Communications Services

MSLGROUP Technology PracticePublic Relations and Communications Services

MSL WarsawPublic Relations and Communications Services

MSLGROUP Financial Communications PracticePublic Relations and Communications Services

Prodigious WorldwideAdvertising Services

Prodigious SoundsAdvertising Services

Sapient Global MarketsBusiness Consulting and Services

Saatchi & Saatchi UKAdvertising Services

Publicis Groupe SingaporeAdvertising Services

Publicis Health MediaAdvertising Services

FallonAdvertising Services

Arc WorldwideAdvertising Services

BBH GlobalAdvertising Services

BBH LondonAdvertising Services

BBH USAAdvertising Services

VivaKiAdvertising Services

RUNAdvertising Services

Publicis Groupe UKAdvertising Services

Publicis Groupe ANZAdvertising Services

RokkanAdvertising Services

North StrategicPublic Relations and Communications Services

Level StudiosAdvertising Services

PDI, Inc.Pharmaceutical Manufacturing

Interpace BiosciencesBiotechnology Research

Leo Burnett AustraliaAdvertising Services

MBMAdvertising Services

Third Horizon ConsultingBusiness Consulting and Services

Digitas New ZealandAdvertising Services

Herd MSLPublic Relations and Communications Services

Sapient Public Sector | Now Publicis SapientBusiness Consulting and Services

Optimedia USAdvertising Services

Saatchi & Saatchi NZAdvertising Services

Balance InternetTechnology, Information and Internet

PublicisdrugstoreRetail

Performics UKAdvertising Services

Publicis ProductionAdvertising Services

Razorfish ANZAdvertising Services

Spark Foundry NZAdvertising Services

Performics AustraliaAdvertising Services

Kaplan Thaler ProductionsAdvertising Services

PROXIMEDIA FRANCETechnology, Information and Internet

LeSHOPAdvertising Services

Breakout Room NZAdvertising Services

Team One Exhibits, Inc.Events Services

Amazon Advertising CommunityAdvertising Services

The Mistaken Identity ProjectAdvertising Services

SapientRazorfish MENA | Now Publicis SapientBusiness Consulting and Services

HollerAdvertising Services

Loading…

Rewilded Retreats Similar Companies

Life Time Inc.

lifetime.life

Life Time provides an entertaining, educational, friendly and inviting, functional and innovative experience of uncompromising quality that meets the health and fitness needs of the entire family. Life Time is a wellness pioneer reshaping the way consumers approach their health by integrating where we move, work and live—digitally and physically—through our Life Time athletic resorts, Life Time Work and Life Time Living brands. Our objective is to deliver the best experiences and programs in the best places by the best people and performers. We are committed to an inclusive culture that welcomes and respects everyone, supporting all people on their path to healthier, happier lives.

Purpose Brands, LLC

purposebrands.com

Purpose Brands, LLC provides fitness, nutrition and wellness support and services to more than 7,000 communities and millions of people around the world. We own and operate the world’s largest and most trusted portfolio of fitness, health and wellness franchise brands and services: Anytime Fitness, Orangetheory Fitness, Waxing the City, Basecamp Fitness/SUMHIIT Fitness, The Bar Method, Stronger U Nutrition, Healthy Contributions and Provision Security. Together, these brands generate USD$3.7 billion in revenue, operating across 50 countries on all seven continents with a combined 6 million members. We combine this portfolio with a world-class franchise operating model and suite of services that helps our brands and franchise owners accelerate growth and deliver exceptional member experiences. Above all, our culture, people and franchise owners share a commitment to personal wellness; a spirit of service to help those who seek to improve their own physical and mental wellbeing; tireless advocacy and innovation for fitness, health and wellness experiences; and a daily honor to earn the trust in our brands from our franchise owners and the people who help consumers on their personal wellness journeys.

Grupo Fleury

grupofleury.com.br

O Grupo Fleury é reconhecido como uma referência de qualidade em medicina diagnóstica no país, com soluções completas, coordenação de cuidado centrada no indivíduo, capacidade de inovação e tecnologia. Temos um portfólio de saúde integrado, preventivo e híbrido, nascemos como um laboratório e evoluímos para ofertas completas de medicina diagnóstica em unidades de atendimento, operações B2B e Lab-to-Lab. Atualmente, o Grupo combina ofertas físicas e digitais, integrando medicina diagnóstica, plataforma de saúde e novos elos da cadeia de saúde, com amplo portfólio de serviços em diferentes especialidades como infusão de medicamentos, medicina reprodutiva, ortopedia, oftalmologia, centro cirúrgico ambulatorial e oncologia. A companhia vivencia as melhores práticas em ESG desde a sua fundação, há quase 100 anos, atuando sempre com protagonismo, exercendo uma cultura organizacional consciente e que compreende o ciclo de impactos gerados. Mais do que isso, tem evoluído em seu conjunto de práticas, mantendo o propósito de ampliar o acesso à saúde, levando qualidade e portfólio de serviços e soluções para cada vez mais brasileiras e brasileiros. O Grupo Fleury é formado por um time de mais de 27 mil pessoas. Estamos presentes (na frente B2C) em 13 estados e no Distrito Federal, somando mais de 500 Unidades de Atendimento. Seguimos engajados em nossa ambição: fortalecer-se como um dos líderes de saúde no Brasil por meio de soluções e experiências cada vez mais completas, integradas e sustentáveis na jornada de saúde e bem-estar das pessoas.

Smart Fit

cb smartfit.com.br

Somos o Grupo Smart Fit, a força que ativa o seu potencial. Um ecossistema em constante evolução que une tecnologia, propósito e performance para transformar o fitness, e a vida das pessoas, em movimento real. Com mais de 22 mil colaboradores e colaboradoras em 16 países, seguimos expandindo com consistência e propósito: tornar o fitness acessível, conectado e inspirador, para todas as pessoas. Crescemos com dados, inovação e visão global, mas é o talento das nossas pessoas que dá ritmo a essa trajetória. Acreditamos que o sucesso é construído com esforço, propósito e constância. E que o potencial de cada um se ativa no dia a dia, quando o individual se conecta ao coletivo. Nosso grupo reúne marcas que representam diferentes estilos de vida e formas de viver o bem-estar: Bio Ritmo, Smart Fit, Nation CT, Race Bootcamp, Vidya Studio, Jab House, Tonus Gym, Aera Pilates, Velocity, Kore, TotalPass e Queima Diária. Juntas, elas compõem um ecossistema completo de saúde, tecnologia e movimento, que cresce junto com quem faz parte dele. Se você acredita que o movimento transforma e quer crescer num ambiente que combina ritmo, propósito e oportunidade, o Grupo Smart Fit é o seu lugar! Venha fazer parte da força que ativa o seu potencial. Confira nossas vagas: https://gruposmartfit.99jobs.com/#job

Massage Envy

MassageEnvy.com

Massage Envy is a leading wellness franchise providing professional massage, skin care, and assisted stretch services nationwide. Co-founded by a massage therapist in 2002, the brand’s mission is simple: make total body care accessible and affordable so people can feel better, look better, and live better. The nationwide network of independently owned and operated franchised locations across 49 states has delivered more than 235 million services and built a community dedicated to well-being, excellence, and care. The Massage Envy Difference: • Focused on whole-body wellness • Personalized services, not one-size-fits-all • Every body is welcome • 20+ years of experience • Membership that makes self-care easier Culture & Careers: Making a difference in clients’ lives is the biggest reward for any wellness professional, but the environment at a Massage Envy franchised location can also offer you the freedom to enjoy more of what you love about your work. From massage therapists and estheticians to front-of-house and management roles, every franchised location team member helps members and guests live healthier, more balanced lives. Explore career opportunities today and join a brand that values, supports, and empowers you. Franchise Ownership: Passionate about wellness? The Massage Envy brand has prime territories available and is actively seeking motivated professionals who want to turn their passion into ownership. Send us a message to learn more. Why Massage Envy: • Trusted national wellness brand • Recurring revenue & scalable business model • Industry-leading innovation • Comprehensive training & ongoing support • 20+ years of experience • Make a real difference in your community Massage Envy Commitment: Whether you’re a guest, team member, or franchisee, Massage Envy is committed to creating a safe, supportive, and consistent environment that champions well-being because when you feel better, you live better.

Aetna, a CVS Health Company

aetna.com

Here at Aetna, a CVS Health® company, we’re building a healthier world by making health care easy, affordable and all about you. Because Healthier Happens Together™! Follow our page for company news, industry commentary, jobs and more. Founded in 1853 in Hartford, CT, Aetna® is one of the nation's leading diversified health care benefits companies, serving an estimated 39 million people with information and resources to help them make better decisions about their health. As a health care leader, we believe that our corporate responsibility starts with helping people live healthier lives. And that means using our resources to make the communities and the world we live in better places. Diversity & Inclusion: Our focus on diversity and inclusion reflects the world around us. Having a diverse group of employees gives us a broader and deeper view of how to serve the people and businesses in our communities. As part of CVS Health, over 70% of our workforce is comprised of women. Join us as we transform the health care system. Our employees are the cornerstone of our mission to help people live healthier lives. Get to know us, why we're passionate about what we do and what makes Aetna a great place to work.

LA Fitness

cb lafitness.com

LA Fitness is a privately owned fitness club chain. LA Fitness has hundreds of health clubs gyms and millions of members across US and Canada. In an industry often equated with fad and fashion, LA Fitness has steadily increased its presence by focusing on the one lifelong benefit valued by everyone: good health. Established in Southern California in 1984, LA Fitness continues to seek innovative ways to enhance the wellbeing of its members. Today, LA Fitness’ state-of-the-art clubs span the continent and continue to expand. LA Fitness’ strong and successful growth stems from its commitment to understanding and meeting the distinct needs of each community it serves. With a wide range of amenities and a highly trained staff, LA Fitness can provide fun and effective workout options to family members of all ages and interests. Website - http://www.lafitness.com Facebook - https://www.facebook.com/LAFitness Twitter - http://www.twitter.com/LAFitness Google+ - https://plus.google.com/+lafitness YouTube: http://www.youtube.com/lafitness

American Heart Association

heart.org

Welcome to the American Heart Association’s movement to change the future of health and be the progress that ensures longer, healthier lives for all. By driving breakthroughs in science, policy, and care – together -- we can overcome today’s biggest health challenges and transform lives every day. The American Heart Association is the nation’s oldest and largest voluntary organization dedicated to fighting heart disease and stroke. We are advocates of good health and promoters of positive behaviors, nutritious eating habits and healthy lifestyles. We also fund cutting-edge research and professional education programs. We promise to have an extraordinary impact on your life by empowering you and your loved ones to save lives, live healthier and enjoy more peace of mind about cardiovascular health. Join our communities: Facebook: http://facebook.com/AmericanHeart X: http://x.com/American_Heart YouTube: http://www.youtube.com/American_Heart Pinterest: http://pinterest.com/americanheart Instagram: http://instagram.com/american_heart TikTok: https://tiktok.com/@americanheartassociation Heart News: http://twitter.com/heartnews ASA Facebook: http://facebook.com/AmericanStroke ASA X: https://X.com/American_Stroke Science News: https://x.com/AHAScience CPR Facebook: https://www.facebook.com/AHACPR CPR X: https://x.com/heartCPR Go Red for Women Facebook: https://www.facebook.com/goredforwomen Go Red for Women X: http://twitter.com/goredforwomen Advocacy Facebook: https://www.facebook.com/yourethecure Advocacy X: https://x.com/AmHeartAdvocacy

Gold's Gym

goldsgym.com

Gold’s Gym has been the world’s trusted fitness authority since 1965. From its beginning as a small gym in Venice, California, Gold’s Gym has grown into a global icon with more than 700 locations serving 3 million people across six continents each day. Whether you are an industry professional or interested in pursuing a dream to make your passion for Fitness a meaningful reality, we want to help you transform your life. Our journey started on a beach in California, yours starts today. Join our Talent Network to receive updates on open positions. http://www.goldsgym.com/join-our-team

Loading…

NEWS

Rewilded Retreats CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…