Vulnerabilities

TI-2024-14883 CVE-2024-22296 · GHSA-2pw9-32q2-4pxm

WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.28.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00335 Published 2024-06-10 No fix listed CWE-862

TI-2024-23562 CVE-2024-35693 · GHSA-jmhh-gxv8-x728

WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list.This issue affects 12 Step Meeting List: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00585 Published 2024-06-08 No fix listed CWE-79

TI-2023-25143 CVE-2023-46641 · GHSA-5574-2w46-rvj9

WordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)

LOW 24

Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.24.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00312 Published 2023-12-07 No fix listed CWE-918

Vulnerabilities

Filters

WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability

WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability

WordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)