Vulnerabilities

TI-2026-84983 CVE-2026-57775 · GHSA-r5h5-pm99-m3rh

Authentication bypass in WordPress Simple Cloudflare Turnstile plugin

LOW 30

Authentication Bypass Using an Alternate Path or Channel vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Authentication Abuse.This issue affects Simple Cloudflare Turnstile: from n/…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00239 Published 2026-11-04 No fix listed CWE-288

TI-2026-82385 CVE-2026-39741 · GHSA-xvp7-mgq6-vm2g

Missing authorization in Simple Cloudflare Turnstile WordPress plugin

LOW 29

Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Cloudflare Turnstile…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00229 Published 2026-10-29 No fix listed CWE-862

TI-2026-36294 CVE-2026-49068 · GHSA-2fch-5g6g-5j6q

WordPress Coupon Affiliates plugin <= 7.8.1 - Sensitive Data Exposure vulnerability

LOW 39

Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00386 Published 2026-06-15 No fix listed CWE-497

TI-2026-29467 CVE-2026-40799 · GHSA-x75m-vg6j-vq53

WordPress Simple Cloudflare Turnstile plugin <= 1.38.0 - Broken Authentication vulnerability

LOW 32

Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00309 Published 2026-06-15 No fix listed CWE-288

TI-2026-29439 CVE-2026-40770 · GHSA-gm96-jpjv-4px7

WordPress Coupon Affiliates plugin <= 7.5.3 - Cross Site Scripting (XSS) vulnerability

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Coupon Affiliates <= 7.5.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-06-15 No fix listed CWE-79

TI-2023-13454 CVE-2023-28992 · GHSA-9gc7-qqx5-gw94

WordPress Coupon Affiliates Plugin <= 5.4.3 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Elliot Sowersby, RelyWP Coupon Affiliates – WooCommerce Affiliate Plugin plugin <= 5.4.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-26 No fix listed CWE-79