Read the docs

wpcraft

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

wpcraft records in CISA KEV

No wpcraft vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-35810 CVE-2025-57957 · GHSA-556j-9jr6-2vjf

WordPress WooMS Plugin <= 9.12 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in wpcraft WooMS wooms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooMS: from n/a through <= 9.12.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00379 Published 2025-09-22 No fix listed CWE-862
TI-2025-35809 CVE-2025-57956 · GHSA-gc8w-6qgr-r4x7

WordPress WooMS Plugin <= 9.12 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpcraft WooMS wooms allows Stored XSS.This issue affects WooMS: from n/a through <= 9.12.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00296 Published 2025-09-22 No fix listed CWE-79
Open these records in search →