Vulnerabilities

TI-2026-05622 CVE-2026-6405 · GHSA-6hfc-j326-f823

Anomify AI <= 0.3.6 - Cross-Site Request Forgery

LOW 19

The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in versions up to and including 0.3.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00168 Published 2026-05-20 No fix listed CWE-352

TI-2026-05621 CVE-2026-6404 · GHSA-58gg-mqhx-3cgq

Anomify AI <= 0.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter

LOW 20

The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'anomify_api_key' parameter in versions up to and including 0.3.6.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00239 Published 2026-05-20 No fix listed CWE-79

Vulnerabilities

Filters

Anomify AI <= 0.3.6 - Cross-Site Request Forgery

Anomify AI <= 0.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter