AA Web Servant vulnerabilities

TI-2025-18300 CVE-2025-24583 · GHSA-9c2q-6mfx-w35r

WordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability

LOW 35

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a th…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00417 Published 2025-04-17 No fix listed CWE-862

TI-2025-18299 CVE-2025-24582 · GHSA-3wh6-j4g5-pq88

WordPress 12 Step Meeting List plugin <= 3.16.5 - Sensitive Data Exposure vulnerability

LOW 32

Insertion of Sensitive Information Into Sent Data vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Retrieve Embedded Sensitive Data.This issue affects 12 Step Meeting List: from n/a throug…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00986 Published 2025-01-24 No fix listed CWE-201

TI-2026-28544 CVE-2026-39570 · GHSA-cpv9-p867-3vp3

WordPress 12 Step Meeting List plugin <= 3.19.9 - Sensitive Data Exposure vulnerability

LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Retrieve Embedded Sensitive Data.This issue affects 12 Step Meeting List: from n/a throug…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-04-08 No fix listed CWE-201

TI-2025-18297 CVE-2025-24580 · GHSA-h926-63hm-5vc6

WordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability

LOW 30

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00661 Published 2025-01-24 No fix listed CWE-862

TI-2026-28543 CVE-2026-39569 · GHSA-mrpg-59p9-vgrh

WordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0028 Published 2026-04-08 No fix listed CWE-862

TI-2025-33899 CVE-2025-54054 · GHSA-fwfv-qmhv-rp3j

WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00235 Published 2025-08-14 No fix listed CWE-79

Critical	0
High	0
Medium	6
Low	0
No CVSS	0

AA Web Servant

Exploited now

Records

WordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability

WordPress 12 Step Meeting List plugin <= 3.16.5 - Sensitive Data Exposure vulnerability

WordPress 12 Step Meeting List plugin <= 3.19.9 - Sensitive Data Exposure vulnerability

WordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability

WordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability

WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability