Vulnerabilities

TI-2026-24892 CVE-2026-32364 · GHSA-q336-5c62-jqr6

WordPress Turbo Manager plugin < 4.0.8 - Local File Inclusion vulnerability

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in redqteam Turbo Manager turbo-manager allows PHP Local File Inclusion.This issue affects Turbo Manag…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00448 Published 2026-03-13 No fix listed CWE-98

TI-2025-20918 CVE-2025-28975 · GHSA-66cf-mw8q-8297

WordPress Alike - WordPress Custom Post Comparison <= 3.0.1 - Cross Site Scripting (XSS) Vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Alike - WordPress Custom Post Comparison alike allows Reflected XSS.This issue affects Alike - WordPress Cust…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00249 Published 2025-08-14 No fix listed CWE-79

TI-2025-22331 CVE-2025-31061 · GHSA-r299-wqh7-rgxq

WordPress Wishlist plugin <= 2.1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Wishlist wishlist allows Reflected XSS.This issue affects Wishlist: from n/a through <= 2.1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2025-06-09 No fix listed CWE-79

TI-2025-22332 CVE-2025-31062 · GHSA-h3fw-28mg-f834

WordPress Wishlist plugin <= 2.1.0 - Sensitive Data Exposure Vulnerability

LOW 20

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in redqteam Wishlist wishlist allows Retrieve Embedded Sensitive Data.This issue affects Wishlist: from n/a through <= 2.1.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00351 Published 2025-05-16 No fix listed CWE-497

TI-2025-22333 CVE-2025-31063 · GHSA-rhpf-gwq4-5q7j

WordPress Wishlist plugin <= 2.1.0 - Broken Access Control Vulnerability