Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: WisdmLabs Clear all filters
TI-2026-19810 CVE-2026-24570 · GHSA-xj39-v8rv-4jgx

WordPress Edwiser Bridge plugin <= 4.3.2 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through <= 4.3.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00248 Published 2026-01-23 No fix listed CWE-862
TI-2025-12690 CVE-2025-13887 · GHSA-h546-gvh8-c9p8

AI BotKit <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Priority LOW 28

The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the `ai_botkit_widget` shortcode in all versions up to, and including, 1…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00223 Published 2026-01-07 No fix listed CWE-79
TI-2025-18310 CVE-2025-24593 · GHSA-27xq-hgcj-7p95

WordPress Edwiser Bridge plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Reflected XSS.This issue affects Edwiser Bridge: from n/a through <= 3.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00267 Published 2025-01-27 No fix listed CWE-79
TI-2024-32904 CVE-2024-49311 · GHSA-xfq9-9xj2-qmwx

WordPress Edwiser Bridge plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Stored XSS.This issue affects Edwiser Bridge: from n/a through <= 3.0.7…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00276 Published 2024-10-17 No fix listed CWE-79
TI-2024-03698 CVE-2024-3964 · GHSA-xrmh-26m7-8f7p

Product Enquiry for WooCommerce < 3.1.8 - Admin+ Stored XSS

Priority MEDIUM 60

The Product Enquiry for WooCommerce WordPress plugin before 3.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks eve…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00476 Published 2024-07-13 Fixed in 3.1.8 CWE-79
TI-2024-20636 CVE-2024-31260 · GHSA-r6hr-43qj-mqc6

WordPress Edwiser Bridge plugin <= 3.0.2 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2024-04-07 No fix listed CWE-89
TI-2021-03256 CVE-2021-4399 · GHSA-6248-57m2-9gf4

Edwiser Bridge <= 2.0.6 - Cross-Site Request Forgery Bypass

Priority LOW 38

The Edwiser Bridge plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,2.0.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00446 Published 2023-07-01 No fix listed CWE-352