WVUF
Company Details
Linkedin ID:
west-virginia-university-foundation-inc
Website:
Employees number:
141
Number of followers:
5,843
NAICS:
561499
Industry Type:
Homepage:
wvuf.org
IP Addresses:
0
Company ID:
WES_1152344
Scan Status:
In-progress
West Virginia University Foundation Company CyberSecurity Posture
wvuf.org
The mission of the WVU Foundation is to enrich the lives of those touched by West Virginia University by maximizing charitable support and providing services to the University, its students and affiliated organizations. Our Vision The WVU Foundation will be a model for excellence in fundraising, investment management and stewardship. Our Core Values Relationships - We value relationships, teamwork, and community involvement as fundamental to achieving our goals and at the core of our mission. Integrity - We conduct our activities in an independent, fair, trustworthy and honest manner. Accountability - We are responsible for our actions. Courage - We support an environment where people feel safe to speak up and take bold, appropriate action with open communication. Innovation - We encourage creative, effective ideas in a collaborative environment to drive successful outcomes. Exceptional Performance - We lead by setting new standards of excellence.
West Virginia University Foundation A.I CyberSecurity Scoring
WVUF Risk Score (AI oriented)Between 700 and 749
WVUF
Updated:
- Powered by our proprietary A.I cyber incident model
- Insurance preferes TPRM score to calculate premium
WVUF Global Score (TPRM)XXXX
WVUF
- Instant access to detailed risk factors
- Benchmark vs. industry & size peers
- Vulnerabilities
- Findings
WVUF Company CyberSecurity News & History
Past Incidents
1
Attack Types
1
West Virginia University Foundation
Ransomware
Rankiteo Explanation
Attack with significant impact with customers data leaks
Description: The Washington State Office of the Attorney General reported on August 21, 2020, that the West Virginia University Foundation experienced a ransomware attack beginning on February 7, 2020, and ending on May 20, 2020. The incident affected 1,015 Washington residents and potentially compromised their names and full date of birth information.
WVUF Company Scoring based on AI Models
Cyber Incidents Likelihood 3 - 6 - 9 months
A.I Risk Score Likelihood 3 - 6 - 9 months
Underwriter Stats for WVUF
Incidents vs Fundraising Industry Average (This Year)
No incidents recorded for West Virginia University Foundation in 2025.
Incidents vs All-Companies Average (This Year)
No incidents recorded for West Virginia University Foundation in 2025.
Incident Types WVUF vs Fundraising Industry Avg (This Year)
No incidents recorded for West Virginia University Foundation in 2025.
Incident History — WVUF (X = Date, Y = Severity)
WVUF cyber incidents detection timeline including parent company and subsidiaries
WVUF Company Subsidiaries
The mission of the WVU Foundation is to enrich the lives of those touched by West Virginia University by maximizing charitable support and providing services to the University, its students and affiliated organizations. Our Vision The WVU Foundation will be a model for excellence in fundraising, investment management and stewardship. Our Core Values Relationships - We value relationships, teamwork, and community involvement as fundamental to achieving our goals and at the core of our mission. Integrity - We conduct our activities in an independent, fair, trustworthy and honest manner. Accountability - We are responsible for our actions. Courage - We support an environment where people feel safe to speak up and take bold, appropriate action with open communication. Innovation - We encourage creative, effective ideas in a collaborative environment to drive successful outcomes. Exceptional Performance - We lead by setting new standards of excellence.
Loading...
WVUF Similar Companies
Community Fundraising Books
Community Fundraising Coupon Books is designed to help schools, churches and non-profits in local communities to raise critically needed funds by providing quality products and services to help them achieve their fund raising goals. We serve all public and private schools, churches, non-profits, civ
Xtraman Fundraising, LLC
Founded in 2007, Xtraman Fundraising is the maker of the nation’s leading fundraising cards. Its fundraising cards are known for raising millions of dollars for organizations all across the country. The company’s mission is to provide organizations all across the nation with an incredibly profitable
Projects Plus Inc.
Projects Plus, Inc. provides executive direction for special events for a wide variety of clients in, the arts; social services, education, health, minority rights, gender equity and civic causes; and organizations working internationally to improve understanding, provide vital services and further
NDSU Foundation
The North Dakota State University Foundation and Alumni Association creates opportunities to advance education, research, and service at the University. We work in close collaboration with faculty, staff, students, and alumni, along with businesses, different industries, and the community, to better
Kansas State University Foundation
The KSU Foundation is K-State's strategic partner for philanthropy. We inspire and guide philanthropy toward university priorities to boldly advance K-State. Foundation staff members work in close partnership with university administrators, deans and faculty to secure charitable contributions from
Swipe for a Cause
Swipe for a Cause is an Independent Sales Organization of First Data that donates 5% of its revenues to Hope Hospice & Palliative Care Rhode Island. When a merchant processes with First Data, every time someone uses a credit or debit card at their business, a portion of that sale automatically goe
.png)
WVUF CyberSecurity News
December 05, 2025 01:01 PM
Media Center
West Virginia University experts can provide commentary, insights and opinions on various news topics. Latest Expert Pitch.
November 19, 2025 08:00 AM
E-News | Faculty Feature: Mohamed Hefeida
The Alexandria, Egypt, native who serves as a teaching associate professor and program director for computer engineering undergraduate and...
November 19, 2025 08:00 AM
ICIT and West Virginia University forge initial academic partnership to strengthen critical infrastructure
The Institute for Critical Infrastructure Technology (ICIT), a nonprofit, nonpartisan 501(c)(3) think tank, is excited to announce its first...
November 12, 2025 08:00 AM
WVU Cyber launches to affirm University commitment in addressing security, workforce and economic challenges
In a collaborative effort, West Virginia University colleges, departments and units are coming together to form WVU Cyber — a...
November 07, 2025 08:00 AM
E-News | WVU outlines research security training requirement
The Department of Energy, U.S. Department of Agriculture and the National Science Foundation require that certain individuals as defined by...
November 04, 2025 08:00 AM
Weirton native among WVU’s most loyal
MORGANTOWN — A Weirton native is among those set to be honored as “most loyal” at West Virginia University. Dr. Robert Gerbo has been named...
October 17, 2025 07:00 AM
George Mason in the Rankings
"As Virginia's largest and most diverse public university, George Mason is a leader in advancing Virginia as a top state in business and...
October 06, 2025 07:00 AM
E-News | Save the date for Focus Forward April 1
Slated for April 1 at the Morgantown Event Center at Waterfront Place, “Focus Forward: Minds and Machines” will explore how cutting-edge...
September 29, 2025 07:00 AM
FirstEnergy Foundation's Largest Hunger Relief Grant to Date Will Deliver 1.9 Million Meals in West Virginia, Maryland and Virginia
32 food banks and pantries benefit from $2.5 million six-state program. FAIRMONT, W.Va., Sept. 29, 2025 /PRNewswire/ -- The FirstEnergy...
Frequently Asked Questions
Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
WVUF CyberSecurity History Information
Official Website of West Virginia University Foundation
The official website of West Virginia University Foundation is http://www.wvuf.org.
West Virginia University Foundation’s AI-Generated Cybersecurity Score
According to Rankiteo, West Virginia University Foundation’s AI-generated cybersecurity score is 721, reflecting their Moderate security posture.
How many security badges does West Virginia University Foundation’ have ?
According to Rankiteo, West Virginia University Foundation currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
Does West Virginia University Foundation have SOC 2 Type 1 certification ?
According to Rankiteo, West Virginia University Foundation is not certified under SOC 2 Type 1.
Does West Virginia University Foundation have SOC 2 Type 2 certification ?
According to Rankiteo, West Virginia University Foundation does not hold a SOC 2 Type 2 certification.
Does West Virginia University Foundation comply with GDPR ?
According to Rankiteo, West Virginia University Foundation is not listed as GDPR compliant.
Does West Virginia University Foundation have PCI DSS certification ?
According to Rankiteo, West Virginia University Foundation does not currently maintain PCI DSS compliance.
Does West Virginia University Foundation comply with HIPAA ?
According to Rankiteo, West Virginia University Foundation is not compliant with HIPAA regulations.
Does West Virginia University Foundation have ISO 27001 certification ?
According to Rankiteo,West Virginia University Foundation is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Industry Classification of West Virginia University Foundation
West Virginia University Foundation operates primarily in the Fundraising industry.
Number of Employees at West Virginia University Foundation
West Virginia University Foundation employs approximately 141 people worldwide.
Subsidiaries Owned by West Virginia University Foundation
West Virginia University Foundation presently has no subsidiaries across any sectors.
West Virginia University Foundation’s LinkedIn Followers
West Virginia University Foundation’s official LinkedIn profile has approximately 5,843 followers.
NAICS Classification of West Virginia University Foundation
West Virginia University Foundation is classified under the NAICS code 561499, which corresponds to All Other Business Support Services.
West Virginia University Foundation’s Presence on Crunchbase
No, West Virginia University Foundation does not have a profile on Crunchbase.
West Virginia University Foundation’s Presence on LinkedIn
Yes, West Virginia University Foundation maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/west-virginia-university-foundation-inc.
Cybersecurity Incidents Involving West Virginia University Foundation
As of December 21, 2025, Rankiteo reports that West Virginia University Foundation has experienced 1 cybersecurity incidents.
Number of Peer and Competitor Companies
West Virginia University Foundation has an estimated 1,146 peer or competitor companies worldwide.
What types of cybersecurity incidents have occurred at West Virginia University Foundation ?
Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.
Incident Details
Can you provide details on each incident ?
Title: Ransomware Attack on West Virginia University Foundation
Description: The West Virginia University Foundation experienced a ransomware attack that potentially compromised the names and full date of birth information of 1,015 Washington residents.
Date Detected: 2020-02-07
Date Publicly Disclosed: 2020-08-21
Date Resolved: 2020-05-20
Type: Ransomware
What are the most common types of attacks the company has faced ?
Common Attack Types: The most common types of attacks the company has faced is Ransomware.
Impact of the Incidents
What was the impact of each incident ?
Incident : Ransomware WES818072625
Data Compromised: Names, Full date of birth
What types of data are most commonly compromised in incidents ?
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Names, Full Date Of Birth and .
Which entities were affected by each incident ?
Incident : Ransomware WES818072625
Entity Name: West Virginia University Foundation
Entity Type: Educational Institution
Industry: Education
Location: West Virginia
Customers Affected: 1015
Data Breach Information
What type of data was compromised in each breach ?
Incident : Ransomware WES818072625
Type of Data Compromised: Names, Full date of birth
Number of Records Exposed: 1015
References
Where can I find more information about each incident ?
Incident : Ransomware WES818072625
Source: Washington State Office of the Attorney General
Date Accessed: 2020-08-21
Where can stakeholders find additional resources on cybersecurity best practices ?
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Washington State Office of the Attorney GeneralDate Accessed: 2020-08-21.
Additional Questions
Incident Details
What was the most recent incident detected ?
Most Recent Incident Detected: The most recent incident detected was on 2020-02-07.
What was the most recent incident publicly disclosed ?
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2020-08-21.
What was the most recent incident resolved ?
Most Recent Incident Resolved: The most recent incident resolved was on 2020-05-20.
Impact of the Incidents
What was the most significant data compromised in an incident ?
Most Significant Data Compromised: The most significant data compromised in an incident were Names, Full date of birth and .
Data Breach Information
What was the most sensitive data compromised in a breach ?
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Full date of birth and Names.
What was the number of records exposed in the most significant breach ?
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 106.0.
References
What is the most recent source of information about an incident ?
Most Recent Source: The most recent source of information about an incident is Washington State Office of the Attorney General.
.png)
Latest Global CVEs (Not Company-Specific)
Description
Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality. The client communicates user-controlled file paths to a privileged service, which performs file system operations without impersonating the requesting user. Due to improper privilege handling and a time-of-check time-of-use race condition combined with symbolic link and mount point manipulation, a local authenticated attacker can coerce the service into deleting arbitrary directories with SYSTEM privileges. This can be exploited to delete protected system folders such as C:\\Config.msi and subsequently achieve execution as NT AUTHORITY\\SYSTEM via MSI rollback techniques.
Risk Information
cvss4
Base: 8.5
Severity: LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to unauthorized modification of data due to a missing capability check on the 'cs_update_application_status_callback' function in all versions up to, and including, 7.7. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject cross-site scripting into the 'status' parameter of applied jobs for any user.
Risk Information
cvss3
Base: 7.6
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
Description
The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 7.7 via the 'cs_update_application_status_callback' due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Candidate-level access and above, to send a site-generated email with injected HTML to any user.
Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `thegem_te_search` shortcode in all versions up to, and including, 1.32.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This vulnerability requires TheGem theme (premium) to be installed with Header Builder mode enabled, and the FiboSearch "Replace search bars" option enabled for TheGem integration.
Risk Information
cvss3
Base: 5.4
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
References
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L104
- https://plugins.trac.wordpress.org/browser/ajax-search-for-woocommerce/tags/1.32.0/partials/themes/thegem-elementor.php#L94
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3420841%40ajax-search-for-woocommerce%2Ftrunk&old=3398612%40ajax-search-for-woocommerce%2Ftrunk&sfp_email=&sfph_mail=#file136
- https://wordpress.org/plugins/ajax-search-for-woocommerce
- https://www.wordfence.com/threat-intel/vulnerabilities/id/8149103e-105d-401d-8a15-b07d131baaac?source=cve
Description
The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.11.0 via the ajax_get_members function. This is due to the use of a predictable low-entropy token (5 hex characters derived from md5 of post ID) to identify member directories and insufficient authorization checks on the unauthenticated AJAX endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including usernames, display names, user roles (including administrator accounts), profile URLs, and user IDs by enumerating predictable directory_id values or brute-forcing the small 16^5 token space.
Risk Information
cvss3
Base: 5.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
References
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/class-functions.php#L41
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-ajax-common.php#L61
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L205
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/includes/core/class-member-directory.php#L2795
- https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.10.6/templates/members.php#L26
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3421362%40ultimate-member%2Ftrunk&old=3408617%40ultimate-member%2Ftrunk&sfp_email=&sfph_mail=
- https://www.wordfence.com/threat-intel/vulnerabilities/id/61337d2d-d15a-45f2-b730-fc034eb3cd31?source=cve
Access Data Using Our API
Get company history
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=west-virginia-university-foundation-inc' -H 'apikey: YOUR_API_KEY_HERE'
RapidWhat Do We Measure ?
Incident
Finding
Grade
Digital Assets
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
These are some of the factors we use to calculate the overall score:
Network Security
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
SBOM (Software Bill of Materials)
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
CMDB (Configuration Management Database)
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Threat Intelligence
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
