Read the docs

WP Messiah

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

WP Messiah records in CISA KEV

No WP Messiah vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

19 records

Priority MEDIUM 42

The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to, and including, 1.4.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00999 Published 2026-07-11 No fix listed CWE-434
Priority MEDIUM 42

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00353 Published 2025-11-06 No fix listed CWE-862
Priority MEDIUM 40

The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db() function in all versions up to, and including, 1.0.17.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00593 Published 2025-01-30 No fix listed CWE-862
Priority LOW 28

The Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Widget HTML Tag Settings in all versions up to, and including, 1.3.3 due t…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00243 Published 2026-06-09 No fix listed CWE-79
Priority LOW 27

The Ai Image Alt Text Generator for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.6 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00411 Published 2025-01-30 No fix listed CWE-79
Priority LOW 25

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00495 Published 2025-04-04 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP safe-ai-malware-protection-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Safe Ai Mal…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00326 Published 2025-03-31 No fix listed CWE-862
Priority LOW 22

Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through <= 1.2.7.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00209 Published 2025-12-18 No fix listed CWE-201
Priority LOW 20

Insertion of Sensitive Information Into Sent Data vulnerability in WP Messiah WP AI CoPilot ai-co-pilot-for-wp allows Retrieve Embedded Sensitive Data.This issue affects WP AI CoPilot: from n/a through <= 1.2.7.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00255 Published 2025-12-09 No fix listed CWE-201
Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah BoomDevs WordPress Coming Soon coming-soon-by-boomdevs allows Retrieve Embedded Sensitive Data.This issue affects Boo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00267 Published 2025-12-31 No fix listed CWE-497
Priority LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Retrieve Embedded Sensitive Data.This is…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00299 Published 2025-04-10 No fix listed CWE-497
Priority LOW 20

Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Swiss Toolkit For WP: from n/a throug…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00374 Published 2025-03-31 No fix listed CWE-862
Priority LOW 20

Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Swiss Toolkit For WP: from n/a throug…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00307 Published 2025-03-31 No fix listed CWE-862
Priority LOW 20

Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu mobile-bottom-menu-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mobile Bottom Menu: from n/a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00331 Published 2025-04-01 No fix listed CWE-862
Priority LOW 19

Missing Authorization vulnerability in WP Messiah TOP Table Of Contents top-table-of-contents allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TOP Table Of Contents: from n/a thr…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-02-19 No fix listed CWE-862
Priority LOW 19

Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2026-01-23 No fix listed CWE-862
Open these records in search →