Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: calliko Clear all filters
TI-2025-41593 CVE-2025-67984 · GHSA-mhvh-7hfw-2pcj

WordPress NPS computy plugin <= 2.8.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in calliko NPS computy nps-computy allows DOM-Based XSS.This issue affects NPS computy: from n/a through <= 2.8.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00221 Published 2026-02-20 No fix listed CWE-79
TI-2025-36488 CVE-2025-58835 · GHSA-75hf-vvf9-p39g

WordPress Bonus for Woo plugin <= 7.6.6 - Other vulnerability Type vulnerability

Priority LOW 24

Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through <…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00288 Published 2025-09-05 No fix listed CWE-1284
TI-2024-10951 CVE-2024-11807 · GHSA-7cw2-857x-2w8q

NPS computy <= 2.8.0 - Reflected Cross-Site Scripting

Priority LOW 27

The NPS computy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'data1' and 'data2' parameters in all versions up to, and including, 2.8.0 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00293 Published 2024-12-04 No fix listed CWE-79