Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Long Watch Studio Clear all filters
TI-2026-29454 CVE-2026-40786 · GHSA-j6vj-j7q6-95qq

WordPress MyRewards plugin <= 5.7.3 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyRewards: from n/a through <= 5.7.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00141 Published 2026-04-15 No fix listed CWE-862
TI-2022-19335 CVE-2022-40700 · GHSA-3mv9-fmvf-xvmx

Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins

Priority MEDIUM 51

Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual walle…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00999 Published 2024-01-19 No fix listed CWE-918