TI-2026-40430 CVE-2026-56036 · GHSA-m96r-cgp3-44h2
WordPress 워드프레스 결제 심플페이 plugin <= 5.5.6 - SQL Injection vulnerability
Priority MEDIUM 46
Unauthenticated SQL Injection in 워드프레스 결제 심플페이 <= 5.5.6 versions.
codemstory
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
codemstory records in CISA KEVNo codemstory vulnerabilities are listed in CISA KEV.
Records
10 records
TI-2024-37250 CVE-2024-56281 · GHSA-33q2-cxrh-v3f9
WordPress 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin <= 5.2.0 - Local File Inclusion vulnerability
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows PHP Local File Inclusion.This issue affects 워…
TI-2026-69936 CVE-2026-95597 · GHSA-r243-pfrp-259m
Missing authorization in 워드프레스 결제 심플페이 allows settings change
Priority LOW 34
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프레스 결제 심플페이: from n/a through 5.5.17.
TI-2024-10405 CVE-2024-11231 · GHSA-fww2-gxf7-jwqr
우커머스 네이버페이 <= 3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via mnp_purchase Shortcode
Priority LOW 29
The 우커머스 네이버페이 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mnp_purchase shortcode in all versions up to, and including, 3.3.7 due to insufficient input sanitization and output escap…
TI-2024-10403 CVE-2024-11229 · GHSA-8xfq-7r72-443q
Cross-site scripting in codemstory 코드엠샵 소셜톡
Priority LOW 29
The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's add_plus_friends and add_plus_talk shortcodes in all versions up to, and including, 1.1.18 due to insufficient input sanitiz…
TI-2024-10402 CVE-2024-11228 · GHSA-r826-pfj3-vphx
Cross-site scripting in codemstory 워드프레스 결제 심플페이 – 우커머스 결제 플러그인
Priority LOW 29
The 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pafw_instant_payment shortcode in all versions up to, and including, 5.1.4 due to insufficient input san…
TI-2025-36481 CVE-2025-58828 · GHSA-78cg-j82w-jg9q
WordPress 코드엠샵 소셜톡 plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codemstory 코드엠샵 소셜톡 mshop-naver-talktalk allows Stored XSS.This issue affects 코드엠샵 소셜톡: from n/a through <= 1.2.2.
TI-2024-11045 CVE-2024-11904 · GHSA-q2g3-798p-hqcp
코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Priority LOW 28
The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msntt_add_plus_talk' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and outpu…
TI-2024-11080 CVE-2024-11943 · GHSA-fh56-fw33-9mqw
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 <= 5.2.2 - Reflected Cross-Site Scripting via add_query_arg Function
Priority LOW 27
The 워드프레스 결제 심플페이 – 우커머스 결제 플러그인 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg() function without appropriate escaping on the URL in all versions up to, and includin…
TI-2025-30158 CVE-2025-47661 · GHSA-wfq6-3hgh-29wh
WordPress 워드프레스 결제 심플페이 plugin <= 5.2.11 - Cross Site Request Forgery (CSRF) Vulnerability
Priority LOW 24
Cross-Site Request Forgery (CSRF) vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Cross Site Request Forgery.This issue affects 워드프레스 결제 심플페이: from n/a through <= 5.2.11.