Vulnerabilities

TI-2026-20184 CVE-2026-24999 · GHSA-739q-666p-vgj7

WordPress Alma plugin <= 5.16.1 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alma: from n/a through <= 5.16.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-02-19 No fix listed CWE-862

TI-2024-01063 CVE-2024-1146 · GHSA-fv3m-jf9j-44vh

Cross-site Scripting at Alma Devklan Blog

LOW 27

Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00327 Published 2024-03-19 No fix listed CWE-79

TI-2024-01062 CVE-2024-1145 · GHSA-h7jv-6rq7-jwqh

Observable Response Discrepancy at Alma Devklan Blog

LOW 31

User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00487 Published 2024-03-19 No fix listed CWE-204

TI-2024-01061 CVE-2024-1144 · GHSA-mwv8-7wjm-xvgf

Improper Access Control at Alma Devklan Blog

LOW 29

Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00333 Published 2024-03-19 No fix listed CWE-284

TI-2023-27555 CVE-2023-50369 · GHSA-8f5w-6f56-pffq

Cross-site scripting in Devklan Alma – Pay in installments or later for WooCommerce