Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: aguidrevitch Clear all filters
TI-2026-70204 CVE-2026-96572 · GHSA-6gm5-6q7x-rq5h

Stored XSS in WP Meteor Website Speed Optimization Addon

Priority LOW 31

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 3.4.18 due to insufficient input sanitization…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00241 Published 2026-10-10 No fix listed CWE-79
TI-2026-02495 CVE-2026-2902 · GHSA-rvjw-233m-925w

WP Meteor Website Speed Optimization Addon <= 3.4.16 - Unauthenticated Stored Cross-Site Scripting via Comment

Priority LOW 27

The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frontend_rewrite' function's 'WPMETEOR[N]WPMETEOR' placeholder content in all versions up to, and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00215 Published 2026-04-29 No fix listed CWE-79