Read the docs

pfefferle

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

pfefferle records in CISA KEV

No pfefferle vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-00478 CVE-2026-0686 · GHSA-pwm7-wr54-2jxv

Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery

Priority LOW 37

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function via the 'Receiver::post' function.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00314 Published 2026-04-02 No fix listed CWE-918
TI-2026-83489 CVE-2026-111109 · GHSA-98q7-93hh-5593

Stored cross-site scripting in Webmention plugin for WordPress

Priority LOW 27

The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a webmention source URL in versions up to, and including, 5.10.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2026-10-31 No fix listed CWE-79
Open these records in search →