Priority MEDIUM 42
The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to, and including, 1.4.6.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00999 · Published 2026-07-11 · No fix listed CWE-434
Priority MEDIUM 42
Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image…
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00353 · Published 2025-11-06 · No fix listed CWE-862
Priority MEDIUM 41
The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.7.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00583 · Published 2024-05-29 · No fix listed CWE-288
Priority MEDIUM 40
The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db() function in all versions up to, and including, 1.0.17.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00593 · Published 2025-01-30 · No fix listed CWE-862
Priority LOW 38
The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.0036 · Published 2026-01-24 · No fix listed CWE-918
Priority LOW 37
Server-Side Request Forgery (SSRF) vulnerability in WP Messiah Frontis Blocks frontis-blocks allows Server Side Request Forgery.This issue affects Frontis Blocks: from n/a through <= 1.1.5.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00294 · Published 2026-01-22 · No fix listed CWE-918
Priority LOW 28
The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Widget HTML Tag Settings in all versions up to, and including, 1.3.3 due t…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2026-06-09 · No fix listed CWE-79
Priority LOW 27
The Ai Image Alt Text Generator for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00411 · Published 2025-01-30 · No fix listed CWE-79
Priority LOW 25
Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00495 · Published 2025-04-04 · No fix listed CWE-862
Priority LOW 24
Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP safe-ai-malware-protection-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Safe Ai Mal…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00326 · Published 2025-03-31 · No fix listed CWE-862
Priority LOW 22
Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through <= 1.2.7.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00209 · Published 2025-12-18 · No fix listed CWE-201
Priority LOW 20
Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through <= 1.2.7.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00255 · Published 2025-12-09 · No fix listed CWE-201
Priority LOW 20
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah BoomDevs WordPress Coming Soon coming-soon-by-boomdevs allows Retrieve Embedded Sensitive Data.This issue affects Boo…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00267 · Published 2025-12-31 · No fix listed CWE-497
Priority LOW 20
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Retrieve Embedded Sensitive Data.This is…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00299 · Published 2025-04-10 · No fix listed CWE-497
Priority LOW 20
Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Swiss Toolkit For WP: from n/a throug…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00374 · Published 2025-03-31 · No fix listed CWE-862
Priority LOW 20
Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Swiss Toolkit For WP: from n/a throug…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00307 · Published 2025-03-31 · No fix listed CWE-862
Priority LOW 20
Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu mobile-bottom-menu-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mobile Bottom Menu: from n/a…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00331 · Published 2025-04-01 · No fix listed CWE-862
Priority LOW 19
Missing Authorization vulnerability in WP Messiah TOP Table Of Contents top-table-of-contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TOP Table Of Contents: from n/a thr…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00215 · Published 2026-02-19 · No fix listed CWE-862
Priority LOW 19
Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0022 · Published 2026-01-23 · No fix listed CWE-862