Legal
Data sources & licenses
VulnCrest Radar combines several public vulnerability sources. This page lists each one, what we use it for and the terms it is used under.
Last updated
On this page5
Sources we use
| Source | Used for | License / terms |
|---|---|---|
| Wordfence Intelligence (Defiant Inc.) | Vulnerability records, affected and patched versions, CNA CVSS | Copyright 2012-2026 Defiant Inc. Wordfence Intelligence Terms and Conditions. Every record links back to its Wordfence page. |
| CVE® (The MITRE Corporation) | CVE identifiers and descriptions | Copyright 1999-2026 The MITRE Corporation. CVE Terms of Use. CVE® is a registered trademark of MITRE. |
| National Vulnerability Database (NVD) | NVD CVSS scores and CWE mapping | Public domain (U.S. government). Shown unmodified. |
| CISA Known Exploited Vulnerabilities | “Listed in CISA KEV” status | CC0 1.0 |
| EPSS by FIRST.org | Exploit prediction score and percentile | FIRST EPSS usage terms |
| WordPress.org Plugin API | Active installs, latest version, closed status | Public API |
NVD notice
This product uses the NVD API but is not endorsed or certified by the NVD.
What VulnCrest writes
Summaries, remediation steps, analysis and page layout are written by VulnCrest and are © VulnCrest. Where an analysis is AI-assisted it is labelled as such, with the name of the researcher who reviewed it. We never present rewritten text as coming from NVD.
Indexing and updates
Data is synchronised every 12 hours. Pages without original VulnCrest analysis are not offered to search engines for indexing.
Corrections
Spotted an error? Email [email protected] with the CVE id and the correct information. Corrections to source data are also reported upstream.