Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: pfefferle Clear all filters
TI-2026-83489 CVE-2026-111109 · GHSA-98q7-93hh-5593

Stored cross-site scripting in Webmention plugin for WordPress

Priority LOW 27

The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Open Graph og:title meta tag of a webmention source URL in versions up to, and including, 5.10.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0028 Published 2026-10-31 No fix listed CWE-79
TI-2026-00478 CVE-2026-0686 · GHSA-pwm7-wr54-2jxv

Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery

Priority LOW 37

The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function via the 'Receiver::post' function.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00314 Published 2026-04-02 No fix listed CWE-918