Vulnerabilities

TI-2026-30981 CVE-2026-42758 · GHSA-pw7f-5523-7q8h

WordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerability

MEDIUM 49

Incorrect Privilege Assignment vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Privilege Escalation.This issue affects WebinarIgnition: from n/a through < 4.08.253.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0032 Published 2026-05-27 No fix listed CWE-266

TI-2026-30980 CVE-2026-42757 · GHSA-3fj5-pxmx-ggjp

WordPress WebinarIgnition plugin < 4.08.253 - Arbitrary File Deletion vulnerability

MEDIUM 43

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Path Traversal.This issue affects WebinarIgnition: from n/a…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00359 Published 2026-05-27 No fix listed CWE-22

TI-2025-37454 CVE-2025-60088 · GHSA-xq7h-2pjf-c4mp

WordPress WebinarIgnition plugin <= 4.06.04 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in Saleswonder Team: Tobias WebinarIgnition webinar-ignition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarIgnition: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0032 Published 2025-12-18 No fix listed CWE-862

TI-2025-33873 CVE-2025-54028 · GHSA-vh4w-63vp-mf77

WordPress CF7 WOW Styler Plugin <= 1.7.2 - Local File Inclusion Vulnerability

LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows PHP Local File Inclusion.This issue affec…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00567 Published 2025-08-20 No fix listed CWE-98

TI-2025-31364 CVE-2025-49316 · GHSA-66h6-rfmj-cw2m

WordPress WP2LEADS plugin <= 3.5.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through <= 3.5.0…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00342 Published 2025-06-17 No fix listed CWE-79

TI-2025-23943 CVE-2025-32922 · GHSA-j25q-6375-5rxx

WordPress WP2LEADS plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Stored XSS.This issue affects WP2LEADS: from n/a through <= 3.5.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0015 Published 2025-05-15 No fix listed CWE-352

TI-2025-22097 CVE-2025-30827 · GHSA-f8wf-6rcj-xc96

WordPress WP2LEADS plugin <= 3.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through <= 3.4.5…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00317 Published 2025-04-01 No fix listed CWE-79

TI-2025-18282 CVE-2025-24565 · GHSA-7rx5-3mv9-446g

WordPress WP2LEADS plugin <= 3.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through <= 3.3.3…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0025 Published 2025-02-14 No fix listed CWE-79

TI-2024-37101 CVE-2024-56065 · GHSA-rmhw-74f4-6h32

WordPress WP2LEADS Plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through <= 3.4.2…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2025-01-13 No fix listed CWE-79

TI-2024-34603 CVE-2024-51689 · GHSA-q449-g9rp-9323

WordPress CF7 WOW Styler plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler allows Reflected XSS.This issue affects CF7 WOW Styler: from n/a through <…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-11-09 No fix listed CWE-80

TI-2024-34494 CVE-2024-51579 · GHSA-w6g2-xwx9-4cmr

WordPress 5 Stars Rating Funnel plugin <=1.4.01 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00395 Published 2024-11-09 No fix listed CWE-89

TI-2024-25044 CVE-2024-37544 · GHSA-35pv-r327-8m4j

WordPress Get Better Reviews for WooCommerce plugin <= 4.0.6 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Saleswonder Team: Tobias Get Better Reviews for WooCommerce more-better-reviews-for-woocommerce.This issue affects Get Better Reviews for WooCommerce: from n/a through <= 4.0.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-07-12 No fix listed CWE-862

TI-2024-23054 CVE-2024-34763 · GHSA-mrcq-5w4f-hvcr

Missing authorization in Saleswonder Team: Tobias Builder for WooCommerce reviews…

LOW 24

Missing Authorization vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortcodes – Revie…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00367 Published 2024-06-11 No fix listed CWE-862

TI-2024-23113 CVE-2024-34826 · GHSA-7223-6cmw-xwrj

WordPress CF7 WOW Styler plugin <= 1.6.4 - Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in Saleswonder Team: Tobias CF7 WOW Styler cf7-styler.This issue affects CF7 WOW Styler: from n/a through <= 1.6.4.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00326 Published 2024-06-11 No fix listed CWE-862

TI-2024-21605 CVE-2024-32725 · GHSA-6f5w-j868-hg3r

WordPress 5 Stars Rating Funnel plugin 1.2.67 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a through <= 1.2.67.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00298 Published 2024-06-09 No fix listed CWE-862

TI-2024-20730 CVE-2024-31358 · GHSA-3jvg-6v8m-chpp

WordPress 5 Stars Rating Funnel plugin <= 1.2.67 - Arbitrary Content Deletion vulnerability

HIGH 72

Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue affects 5 Stars Rating Funnel: from n/a through <= 1.2.67.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00578 Published 2024-04-10 No fix listed CWE-862

TI-2024-20747 CVE-2024-31375 · GHSA-cw6g-w5px-p549

WordPress WP2LEADS plugin <= 3.2.7 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads.This issue affects WP2LEADS: from n/a through <= 3.2.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00391 Published 2024-04-08 No fix listed CWE-862

TI-2024-19267 CVE-2024-29093 · GHSA-3442-jw62-mjxj

Cross-site request forgery in Saleswonder Team: Tobias Builder for WooCommerce reviews…

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Saleswonder Team: Tobias Builder for WooCommerce reviews shortcodes – ReviewShort woo-product-reviews-shortcode.This issue affects Builder for WooCommerce reviews shortc…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00202 Published 2024-03-19 No fix listed CWE-352

Vulnerabilities

Filters