Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Israpil Clear all filters
TI-2026-24859 CVE-2026-32331 · GHSA-phfp-3mx7-3q73

WordPress Textmetrics plugin <= 3.6.4 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textmetrics: from n/a through <= 3.6.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00214 Published 2026-03-13 No fix listed CWE-862
TI-2026-19804 CVE-2026-24564 · GHSA-w469-2xcp-6mq4

WordPress Textmetrics plugin <= 3.6.5 - Content Injection vulnerability

Priority LOW 20

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Israpil Textmetrics webtexttool allows Code Injection.This issue affects Textmetrics: from n/a through <= 3.6.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-01-23 No fix listed CWE-80
TI-2025-22094 CVE-2025-30824 · GHSA-2pm5-4pq3-87vj

WordPress Textmetrics plugin <= 3.6.1 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Israpil Textmetrics webtexttool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Textmetrics: from n/a through <= 3.6.1.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00539 Published 2025-03-27 No fix listed CWE-862