Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: wokamoto Clear all filters
TI-2025-22691 CVE-2025-31528 · GHSA-p3mg-8v4v-xr9c

WordPress StaticPress plugin <= 0.4.5 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in wokamoto StaticPress staticpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects StaticPress: from n/a through <= 0.4.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00289 Published 2025-03-31 No fix listed CWE-862
TI-2024-00645 CVE-2024-0700 · GHSA-gjhq-mx45-hxqm

Simple Tweet <= 1.4.0.2 - Authenticated (Author+) Stored Cross-Site Scripting

Priority LOW 29

The Simple Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tweet this text value in all versions up to, and including, 1.4.0.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00532 Published 2024-03-13 No fix listed CWE-79