winking

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

winking records in CISA KEV

No winking vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-05613 CVE-2026-6395 · GHSA-p637-7ww8-j45c

Word 2 Cash <= 0.9.2 - Cross-Site Request Forgeryto Stored Cross-Site Scripting via Settings Page

LOW 26

The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in versions up to and including 0.9.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00153 Published 2026-05-20 No fix listed CWE-352

TI-2025-20120 CVE-2025-27273 · GHSA-xh6j-pwvm-gcgm

WordPress Affiliate Links Manager Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in winking Affiliate Links Manager affiliate-links-manager allows Reflected XSS.This issue affects Affiliate Links Manage…

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00205 Published 2025-03-03 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0