Wappointment team

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wappointment team records in CISA KEV

No Wappointment team vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-67955 CVE-2026-39756 · GHSA-p65h-4xv9-c744

Insecure direct object references in WordPress Wappointment plugin

LOW 34

Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00255 Published 2026-10-06 No fix listed CWE-639

TI-2025-42096 CVE-2025-68575 · GHSA-vpgr-c763-cmc3

WordPress Wappointment plugin <= 2.7.6 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wappointment: from n/a through <= 2.7.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2025-12-24 No fix listed CWE-862

TI-2025-41305 CVE-2025-67551 · GHSA-h6rm-qgch-65pr

WordPress Wappointment plugin <= 2.6.9 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wappointment team Wappointment wappointment allows Stored XSS.This issue affects Wappointment: from n/a through <= 2.6…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0019 Published 2025-12-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0