passeum

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

passeum records in CISA KEV

No passeum vulnerabilities are listed in CISA KEV.

1 record

TI-2026-06524 CVE-2026-7421 · GHSA-4r7r-w926-gm5j

LOW 20

The Passeum Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.0.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00208 Published 2026-06-02 No fix listed CWE-79