What is the official website of Zest Reply ?

The official website of Zest Reply is https://www.reply.com/zest-reply/en/.

What is Zest Reply's cybersecurity risk score?

Zest Reply has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Zest Reply experienced?

According to Rankiteo, Zest Reply currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Zest Reply been affected by any supply chain cyber incidents ?

According to Rankiteo, Zest Reply has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Zest Reply have SOC 2 Type 1 certification ?

According to Rankiteo, Zest Reply is not certified under SOC 2 Type 1.

Does Zest Reply have SOC 2 Type 2 certification ?

According to Rankiteo, Zest Reply does not hold a SOC 2 Type 2 certification.

Does Zest Reply comply with GDPR ?

According to Rankiteo, Zest Reply is not listed as GDPR compliant.

Does Zest Reply have PCI DSS certification ?

According to Rankiteo, Zest Reply does not currently maintain PCI DSS compliance.

Does Zest Reply comply with HIPAA ?

According to Rankiteo, Zest Reply is not compliant with HIPAA regulations.

Does Zest Reply have ISO 27001 certification ?

According to Rankiteo,Zest Reply is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Zest Reply operate in ?

Zest Reply operates primarily in the IT Services and IT Consulting industry.

How many employees does Zest Reply have ?

Zest Reply employs approximately 6 people worldwide.

Does Zest Reply own any subsidiaries ?

Zest Reply presently has no subsidiaries across any sectors.

How many LinkedIn followers does Zest Reply have ?

Zest Reply's official LinkedIn profile has approximately 200 followers.

What is the NAICS classification code for Zest Reply ?

Zest Reply is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Zest Reply have a Crunchbase profile ?

No, Zest Reply does not have a profile on Crunchbase.

Does Zest Reply have a LinkedIn profile ?

Yes, Zest Reply maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/zest-reply.

How many cybersecurity incidents has Zest Reply experienced ?

As of June 14, 2026, Rankiteo reports that Zest Reply has not experienced any cybersecurity incidents.

How many peer or competitor companies does Zest Reply have ?

Zest Reply has an estimated 40,681 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Zest Reply

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

Zest Reply Vendor Cyber Rating & Cyber Score

reply.com

Add Your Compliance Badge

Zest Reply was born with the ambition to help customers deploy Enterprise levels Generative AI Solutions with a focus on Customer Engagement, Compliance Reporting and applications to Software Development.

Zest Reply A.I CyberSecurity Scoring

Scoring History

Zest Reply

Zest Reply CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Zest Reply Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Zest Reply

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Zest Reply in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Zest Reply in 2026.

Incident Types Zest Reply vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Zest Reply in 2026.

Incident History - Zest Reply (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Zest Reply Subsidiaries

Zest Reply

IT Services and IT Consulting

Website: https://www.reply.com/zest-reply/en/

Company Size: 6

124

ReplyIT Services and IT Consulting

Blue Reply ITIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

Communication Valley ReplyComputer and Network Security

Like ReplyAdvertising Services

Machine Learning ReplyIT Services and IT Consulting

Glue ReplyIT Services and IT Consulting

Concept Quality ReplyIT Services and IT Consulting

Wemanity Learning CenterDéveloppement professionnel et coaching

Fincon Reply GmbHInformation Services

Data Reply UKIT Services and IT Consulting

e*finance consulting ReplyFinancial Services

HERMES REPLYInformation Technology & Services

ARLANIS REPLYIT Services and IT Consulting

Spur ReplyBusiness Consulting and Services

Logistics Reply UKSoftware Development

AIM ReplyIT Services and IT Consulting

Concept Reply USInformation Technology & Services

Sprint Reply DEIT Services and IT Consulting

Liquid ReplyIT Services and IT Consulting

KI ReplyInformation Technology & Services

Target Reply RomeIT Services and IT Consulting

Business Elements ReplyIT Services and IT Consulting

Spike ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Solidsoft ReplyIT Services and IT Consulting

Comwrap Reply DACHTechnology, Information and Internet

Life At ReplyIT Services and IT Consulting

BitmamaAdvertising Services

Valorem ReplyIT Services and IT Consulting

Valorem Reply - Technology Industry SolutionsIT Services and IT Consulting

Wemanity MarocIT Services and IT Consulting

Xister ReplyAdvertising Services

CLUSTER REPLYIT Services and IT Consulting

Storm ReplyIT Services and IT Consulting

Avantage ReplyFinancial Services

IFRS 9Financial Services

Compliance and Conduct RiskFinancial Services

Nexi DigitalFinancial Services

Lynx RecruitmentStaffing and Recruiting

Machine Learning Reply GmbHIT Services and IT Consulting

WM ReplyIT Services and IT Consulting

Syskoplan Reply USIT Services and IT Consulting

Technology ReplySoftware Development

Threepipe ReplyAdvertising Services

Wemanity BelgiumInformation Technology & Services

Cloud9 ReplyIT Services and IT Consulting

Concept Engineering ReplyIT Services and IT Consulting

Mansion House ConsultingBusiness Consulting and Services

Go ReplyIT Services and IT Consulting

Cluster Reply DEIT Services and IT Consulting

ATLAS REPLYIT Services and IT Consulting

Sytel ReplyIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Net ReplyIT Services and IT Consulting

Pay ReplyInformation Technology & Services

Syskoplan Reply DACHInformation Technology & Services

Connect ReplyIT Services and IT Consulting

Comsysto Reply GmbHIT Services and IT Consulting

ARLANIS REPLY ITIT Services and IT Consulting

Whitehall ReplyIT Services and IT Consulting

Laife ReplyInformation Technology & Services

Aktive ReplyInformation Technology & Services

Canvas ReplyIT Services and IT Consulting

Business ReplySoftware Development

Graymatter ReplyAdvertising Services

Graymatter REPLY DigitalAdvertising Services

Data Reply FRInformation Technology & Services

Light ReplyIT Services and IT Consulting

Technology Reply RomaniaIT Services and IT Consulting

4brands ReplyInformation Technology & Services

Triplesense ReplyTechnology, Information and Internet

Autonomous Reply FRIT Services and IT Consulting

Cortex Reply DEIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

Logistics Reply DESoftware Development

Blue Reply DEIT Services and IT Consulting

Accelerator 365 by ReplySoftware Development

Spike Reply LuxembourgIT Services and IT Consulting

Cortex Reply UKTechnology, Information and Internet

Open Reply UKInformation Technology & Services

Starbytes.itInformation Technology & Services

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Sprint Reply BEIT Services and IT Consulting

Net Reply UKIT Services and IT Consulting

Open ReplyInformation Technology & Services

Sytel Reply NorthInformation Technology & Services

Up ReplyIT Services and IT Consulting

Logistics Reply USSoftware Development

Macros Reply GmbHIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Live Reply DEIT Services and IT Consulting

Roboverse Reply DEIT Services and IT Consulting

Air ReplyIT Services and IT Consulting

Infinity Reply ITIT Services and IT Consulting

Neo ReplyIT Services and IT Consulting

Storm Reply DEIT Services and IT Consulting

Infinity Reply DEIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Storm Reply, Inc.Professional Services

Data Reply ITIT Services and IT Consulting

Blockchain ReplyIT Services and IT Consulting

Data Reply DEInformation Technology & Services

Target ReplyData Infrastructure and Analytics

Wemanity NetherlandsProfessional Training and Coaching

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Reply ChallengesFornitori di e-learning

Live Reply ItalyIT Services and IT Consulting

Affinity ReplyIT Services and IT Consulting

Eos ReplyIT Services and IT Consulting

Atomic ReplyBusiness Consulting and Services

Core ReplyInformation Technology & Services

Spike Reply UKTechnology, Information and Internet

Industrie Reply USMotor Vehicle Manufacturing

Cluster Reply PLIT Services and IT Consulting

Sense ReplyIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Ki Reply UKIT Services and IT Consulting

Alpha ReplyIT Services and IT Consulting

Loading…

Zest Reply Similar Companies

Infinite Computer Solutions

infinite.com

Infinite is a global leader in technology modernization, next-gen IT services and solutions, and digital engineering, with over two decades of experience helping clients turn digital transformation into business value. Leveraging an AI-first approach, we combine leading technologies, innovative platforms and accelerators with practical know-how. With the scale of over 23,000 talented professionals across 20+ global locations, we proudly serve hundreds of clients, across all industries including healthcare, financial services, telecom, technology, media, and more. At Infinite, we go beyond technology. We collaborate deeply with our clients to deliver innovative, tailored and client-focused solutions. Infinite is proud to be recognized by ISG, Avasant, Everest Group, HFS, Fosway Group and others for the innovation and leadership we bring to our clients.

Iron Mountain

cb ironmountain.com

In the era of AI, your data is your advantage. Yet too often it remains untapped: disconnected from systems, underutilized, untrained, and exposed to risk. Iron Mountain is the trusted partner for organizations of all sizes to unlock what’s possible, transforming information into intelligence and assets into advantage. How? By seamlessly managing digital and physical assets of all kinds across their lifecycle—making them visible, secure, accessible, and AI-ready. From payments to pathology, mortgages to media, fine art to IT, we’ve helped more than 240,000 customers around the world, including 95% of the Fortune 1000, unlock more value from what’s already within reach. All with unparalleled security, governance, and sustainability at every step. What can we unlock together?

NTT DATA North America

nttdata.com

NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients innovate, optimize and transform for long-term success. Our R&D investments help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity.

General Dynamics Information Technology

gdit.com

GDIT is a global technology and professional services company that delivers solutions, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. GDIT is part of General Dynamics, a global aerospace and defense company. We have shared our clients’ sense of purpose for over half a century and have a unique understanding of their missions, complex environments, and a rapidly changing world. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

AlmavivA Group

almaviva.it

Almaviva is the Italian digital innovation group that supports the country’s growth by helping enterprises meet the challenges of staying competitive in the digital age. The Group helps organizations transform their business models, operational structures, corporate culture, and ICT systems. Building on strong Made in Italy expertise, the Almaviva Group has developed a global network of 41,000 professionals, 30 companies, and 80 offices worldwide, with a significant presence in Latin America (Brazil, Colombia, and the Dominican Republic), as well as in the United States, Belgium, Spain, Finland, Saudi Arabia, the United Arab Emirates, Egypt, and Tunisia.

Coforge

cb coforge.com

Coforge is a global digital services and solutions provider that fuses deep domain expertise with emerging technologies to deliver real-world business impact. With a sharp focus on select industries and an execution intensity that’s uniquely our own, Coforge has emerged as the 7th largest Indian IT services firm, with a revenue growth rate nearly 8x the industry average. We help enterprises transform into intelligent, high-growth businesses through a wide gamut of digital transformation capabilities and deep experience across industries, including Agentic AI, Cloud, Data & Analytics, Low-Code Platforms, Intelligent Automation, Cybersecurity, and the setup and scaling of Global Capability Centers (GCCs). We deliver a wide range of digital engineering services—enabling modernization, operational agility, customer experience transformation, and industry-specific platform solutions. We operate across 24 countries, with 30 global delivery centers and a thriving workforce of 33,497 employees. “We are somewhat atypical in our approach to solving business problems. We are specialists, not just engineers and technologists, who spend an inordinate amount of time understanding the targeted functional spaces that we focus on.” — Sudhir Singh, CEO Coforge is a certified Great Place to Work® (5 years in a row), recognized for excellence in Employee Engagement, Learning & Development, and Corporate Social Responsibility. Our Greater Noida HQ runs entirely on 100% green energy. Through initiatives like The Coforge Public Library, we provide free, inclusive access to knowledge in Noida and Gurugram—and intend to expand this network across India. Coforge has been recognized by leading analysts and advisory firms, including Gartner, Forrester, Everest Group, Zinnov, and more.

Sutherland

sutherlandglobal.com

Artificial Intelligence. Automation. Cloud Engineering. Advanced Analytics. For Enterprises, these are key factors of success. For us, they’re our core expertise. We work with global iconic brands. We bring them a unique value proposition through market-leading technologies and business process excellence. At the heart of it all is Digital Engineering services – the foundation that powers rapid innovation and scalable business transformation. We’ve created 363 unique and independent inventions, 250 of which are AI-based and rolled up under several patent grants in critical technologies. Leveraging our advanced products and platforms, we drive digital transformation at scale, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless “as-a-service” model. For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. With proven strategies and agile execution, we don’t just enable change — we engineer digital outcomes.

T-Systems International

t-systems.com

Your digitalization partner with industry expertise With locations in more than 26 countries and over 26,000 employees (2024), T-Systems is one of the leading providers of digital services in Europe. The Deutsche Telekom subsidiary is headquartered in Germany and has a presence in Europe as well as in selected core markets and strategic production locations. T-Systems can provide a global production and supply chain to companies operating worldwide. T-Systems offers integrated end-to-end IT solutions, driving the digital transformation of companies in all industries and the public sector. T-Systems’ focus industries are automotive, the public sector, healthcare and transport. For these areas, T-Systems develops industryspecific solutions – so-called vertical applications. The comprehensive portfolio of services includes secure operation of traditional IT infrastructures, migration to private cloud and public cloud environments of hyperscalers, as well as management of hybrid and multi-cloud infrastructures. T-Systems integrates customized platforms, industry-specific applications and innovative technologies such as artificial intelligence (AI), big data and blockchain into these infrastructures. To achieve this, the Telekom subsidiary works closely with leading global technology partners. The end-to-end services also include state-of-the-art security solutions and data protection in accordance with DSGVO requirements. T-Systems pursues a holistic approach: consulting (advisory) and solutions from the areas of digital, cloud services and security are offered from a single source. Become one of us: https://www.t-systems.com/de/en/company/careers Imprint: https://www.t-systems.com/de/en/imprint

Infosys BPM

infosysbpm.com

Infosys BPM Ltd., the business process management subsidiary of Infosys Ltd. (NYSE: INFY), was set up in April 2002. Infosys BPM focuses on integrated end-to-end outsourcing and delivers transformational benefits to its clients through reduced costs, ongoing productivity improvements, and process re-engineering. Infosys BPM operates in India, Poland, the Czech Republic, the Netherlands, Ireland, South Africa, Brazil, Mexico, Costa Rica, the United States, Puerto Rico, China, the Philippines, Singapore, and Australia. Infosys BPM has been consistently ranked among the leading BPM companies and has received over 60 awards and recognitions in the last 5 years from key industry bodies and forums like the International Association of Outsourcing Professionals, Outsourcing Center, SSON, and NOA, among others. Infosys BPM also has very robust people practices, as substantiated by the various HR-specific awards it has won over the years. The company has consistently been ranked among the top employers of choice, on the basis of its industry-leading HR best practices. The company’s senior leaders contribute widely to industry forums as BPO strategists.

Loading…

NEWS

Zest Reply CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 08, 2024 08:00 AM

GenAI-powered Cybersecurity Vendor Landscape - 2024

Discover the top GenAI Cybersecurity tool providers through AIM Research's PeMa Quadrant, which showcases the leading players in the market...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…