Read the docs

calliko

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

calliko records in CISA KEV

No calliko vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-41593 CVE-2025-67984 · GHSA-mhvh-7hfw-2pcj

WordPress NPS computy plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in calliko NPS computy nps-computy allows DOM-Based XSS.This issue affects NPS computy: from n/a through <= 2.8.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-02-20 No fix listed CWE-79
TI-2024-10951 CVE-2024-11807 · GHSA-7cw2-857x-2w8q

NPS computy <= 2.8.0 - Reflected Cross-Site Scripting

Priority LOW 27

The NPS computy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'data1' and 'data2' parameters in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00293 Published 2024-12-04 No fix listed CWE-79
TI-2025-36488 CVE-2025-58835 · GHSA-75hf-vvf9-p39g

WordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability

Priority LOW 24

Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through <…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00288 Published 2025-09-05 No fix listed CWE-1284
Open these records in search →