CreativeWS vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.5	EPSS 0.4%	CVE-2026-57787CWS SVGicons (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2026-07-13CVE Database V5CVE-2026-57787 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Blind SQL Injection.This issue affects CWS SVGicons: from n/a through <= 1.5.5. EPSS 0.4%Vulnerability CreativeWS CWE-89	CVE Database V5	2026-07-13
High	8.1	EPSS 0.4%	CVE-2026-32505Kiddy (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.4%2026-03-25CVE Database V5CVE-2026-32505 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Kiddy kiddy allows PHP Local File Inclusion.This issue affects Kiddy: from n/a through <= 2.0.8. EPSS 0.4%Vulnerability CreativeWS	CVE Database V5	2026-03-25
High	8.1	EPSS 0.4%	CVE-2026-32504VintWood (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.4%2026-03-25CVE Database V5CVE-2026-32504 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS VintWood vintwood allows PHP Local File Inclusion.This issue affects VintWood: from n/a through <= 1.1.8. EPSS 0.4%Vulnerability CreativeWS	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-32503Trendustry (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-32503 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Trendustry trendustry allows PHP Local File Inclusion.This issue affects Trendustry: from n/a through <= 1.1.4. EPSS 0.5%Vulnerability CreativeWS	CVE Database V5	2026-03-25
High	8.1	EPSS 0.4%	CVE-2026-32500MetaMax (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.4%2026-03-25CVE Database V5CVE-2026-32500 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS MetaMax metamax allows PHP Local File Inclusion.This issue affects MetaMax: from n/a through <= 1.1.4. EPSS 0.4%Vulnerability CreativeWS	CVE Database V5	2026-03-25

Page 1 of 1