Vulnerability Data Licensing¶

The Fused WordPress vulnerability archive combines upstream vulnerability records and scoring data with independently authored Fused summaries and remediation guidance.

NVD¶

This product uses the NVD API but is not endorsed or certified by the NVD.

The National Vulnerability Database is a public service of the National Institute of Standards and Technology. NVD data is used to retrieve CVE records, NVD assessments, dates, affected-version information, and upstream references.

Source-record text is CVE/CNA content delivered through the NVD API. Fused summaries and remediation guidance are independently authored and are not attributed to NVD.

CVE¶

MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

CVE Terms of Use

CWE¶

CWE™ is free to use by any organization or individual for any research, development, and/or commercial purposes, per these CWE Terms of Use. Accordingly, The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. Any copy you make for such purposes is authorized on the condition that you reproduce MITRE’s copyright designation and this license in any such copy.

CWE Terms of Use

CVSS¶

CVSS is owned and managed by FIRST.Org, Inc. (FIRST) and used by permission. Published scores identify their source and version and are accompanied by their vector strings when an upstream score is available.

Common Vulnerability Scoring System

Fused editorial¶

Vulnerability summaries, remediation recommendations, archive organization, and other original editorial material identified as Fused content are authored by Fused. Upstream factual data and licensed source-record material remain subject to their respective terms above.

All other copyrights and trademarks are the property of their respective owners.

The archive is provided for informational purposes and may contain delayed, incomplete, or inaccurate upstream data. Assess each vulnerability against the software and configuration actually in use.