Flow

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Flow records in CISA KEV

No Flow vulnerabilities are listed in CISA KEV.

1 record

TI-2026-41661 CVE-2026-57857 · GHSA-r6hg-r245-924g

LOW 23

The Flow Payment plugin for WordPress (flow.cl) version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00336 Published 2026-07-18 Fixed in 3.0.9 CWE-79