Vulnerabilities

TI-2026-05613 CVE-2026-6395 · GHSA-p637-7ww8-j45c

Word 2 Cash <= 0.9.2 - Cross-Site Request Forgeryto Stored Cross-Site Scripting via Settings Page

LOW 26

The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in versions up to and including 0.9.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00153 Published 2026-05-20 No fix listed CWE-352

TI-2025-20120 CVE-2025-27273 · GHSA-xh6j-pwvm-gcgm

WordPress Affiliate Links Manager Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in winking Affiliate Links Manager affiliate-links-manager allows Reflected XSS.This issue affects Affiliate Links Manage…

CVSS 3.1MEDIUM 5.8 Network No auth User interaction EPSS 0.00205 Published 2025-03-03 No fix listed CWE-79

Vulnerabilities

Filters

Word 2 Cash <= 0.9.2 - Cross-Site Request Forgeryto Stored Cross-Site Scripting via Settings Page

WordPress Affiliate Links Manager Plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability