Read the docs

WEN Solutions

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WEN Solutions records in CISA KEV

No WEN Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Child Theme Generator 2 records MEDIUM Notice Bar 1 record LOW Wp Travel 1 record LOW

Records

9 records

TI-2026-56432 CVE-2026-81796 · GHSA-q448-pff5-p9p3

WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability

Priority LOW 32

Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00401 Published 2026-09-10 No fix listed CWE-288
TI-2024-03365 CVE-2024-3610 · GHSA-6vg7-562r-mh4w

WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation

Priority LOW 31

The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctg_easy_child_theme() function in all versions up to, and including, 1.1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0053 Published 2024-06-21 No fix listed CWE-862
TI-2026-19797 CVE-2026-24557 · GHSA-5cj3-f3h4-q63p

WordPress Contact Form 7 GetResponse Extension plugin <= 1.0.8 - Sensitive Data Exposure vulnerability

Priority LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in WEN Solutions Contact Form 7 GetResponse Extension contact-form-7-getresponse-extension allows Retrieve Embedded Sensitive Data.This issue affects Contac…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2026-01-23 No fix listed CWE-201
TI-2025-31437 CVE-2025-49389 · GHSA-5gp2-3fcv-vf45

WordPress Notice Bar Plugin <= 3.1.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Solutions Notice Bar notice-bar allows Stored XSS.This issue affects Notice Bar: from n/a through <= 3.1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00202 Published 2025-08-20 No fix listed CWE-79
TI-2025-07949 CVE-2025-8686 · GHSA-8f57-7hp7-6jm9

WP Easy FAQs <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via WP_EASY_FAQ Shortcode

Priority LOW 28

The WP Easy FAQs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's WP_EASY_FAQ shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00307 Published 2025-09-11 No fix listed CWE-79
TI-2025-07376 CVE-2025-8062 · GHSA-4vwc-5h5f-gf72

WS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode

Priority LOW 28

The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ws_weather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00253 Published 2025-08-23 No fix listed CWE-79
TI-2021-03246 CVE-2021-4389 · GHSA-xrf5-9j7g-xmmx

WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass

Priority LOW 20

The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00464 Published 2023-07-01 No fix listed CWE-352
Open these records in search →