Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: WEN Solutions Clear all filters
TI-2026-56432 CVE-2026-81796 · GHSA-q448-pff5-p9p3

WordPress WP Travel plugin <= 12.0.3 - Broken Authentication vulnerability

Priority LOW 32

Authentication Bypass Using an Alternate Path or Channel vulnerability in WEN Solutions WP Travel wp-travel allows Password Recovery Exploitation.This issue affects WP Travel: from n/a through 12.0.3.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00401 Published 2026-09-10 No fix listed CWE-288
TI-2026-19797 CVE-2026-24557 · GHSA-5cj3-f3h4-q63p

WordPress Contact Form 7 GetResponse Extension plugin <= 1.0.8 - Sensitive Data Exposure vulnerability

Priority LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in WEN Solutions Contact Form 7 GetResponse Extension contact-form-7-getresponse-extension allows Retrieve Embedded Sensitive Data.This issue affects Contac…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2026-01-23 No fix listed CWE-201
TI-2025-07949 CVE-2025-8686 · GHSA-8f57-7hp7-6jm9

WP Easy FAQs <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via WP_EASY_FAQ Shortcode

Priority LOW 28

The WP Easy FAQs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's WP_EASY_FAQ shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00307 Published 2025-09-11 No fix listed CWE-79
TI-2025-07376 CVE-2025-8062 · GHSA-4vwc-5h5f-gf72

WS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode

Priority LOW 28

The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ws_weather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00253 Published 2025-08-23 No fix listed CWE-79
TI-2025-31437 CVE-2025-49389 · GHSA-5gp2-3fcv-vf45

WordPress Notice Bar Plugin <= 3.1.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Solutions Notice Bar notice-bar allows Stored XSS.This issue affects Notice Bar: from n/a through <= 3.1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00202 Published 2025-08-20 No fix listed CWE-79
TI-2024-03365 CVE-2024-3610 · GHSA-6vg7-562r-mh4w

WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation

Priority LOW 31

The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctg_easy_child_theme() function in all versions up to, and including, 1.1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0053 Published 2024-06-21 No fix listed CWE-862
TI-2021-03246 CVE-2021-4389 · GHSA-xrf5-9j7g-xmmx

WP Travel <= 4.4.6 - Cross-Site Request Forgery Bypass

Priority LOW 20

The WP Travel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00464 Published 2023-07-01 No fix listed CWE-352