Read the docs

softnwords

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

softnwords records in CISA KEV

No softnwords vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-32835 CVE-2025-52785 · GHSA-grrf-pchq-gfwx

WordPress SMM API plugin <= 6.0.31 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in softnwords SMM API smm-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SMM API: from n/a through <= 6.0.31.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00312 Published 2025-08-14 No fix listed CWE-862
TI-2025-22992 CVE-2025-31855 · GHSA-9w9x-35h7-p37h

WordPress SMM API plugin <= 6.0.31 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in softnwords SMM API smm-api allows Stored XSS.This issue affects SMM API: from n/a through <= 6.0.31.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0028 Published 2025-04-01 No fix listed CWE-79
Open these records in search →