Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
wppochipp records in CISA KEVNo wppochipp vulnerabilities are listed in CISA KEV.
Priority LOW 30
Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through <= 1.18.0.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00254 · Published 2025-12-16 · No fix listed CWE-862
Priority LOW 27
The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0038 · Published 2026-09-19 · No fix listed CWE-79
Priority LOW 24
Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through < 1.18.9.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00183 · Published 2026-03-13 · No fix listed CWE-862
