Monkeysan vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-66673Flatastic (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-20CVE Database V5CVE-2026-66673 CVE-2026-66673 is a high-severity vulnerability in Monkeysan Flatastic affecting versions up to 2.0. It is an unauthenticated Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability allows attackers to inject malicious scripts that can lead to partial confidentiality, integrity, and availability impacts. EPSS 0.3%Vulnerability Monkeysan CWE-79	CVE Database V5	2026-08-20
Critical	9.8	EPSS 0.6%	CVE-2026-66672Flatastic (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-08-20CVE Database V5CVE-2026-66672 CVE-2026-66672 is a critical vulnerability in Monkeysan Flatastic versions up to and including 2.0. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). This flaw allows remote attackers to execute arbitrary code without authentication. EPSS 0.6%Vulnerability Monkeysan CWE-502 #ghsa-mwfw-263q-69wc	CVE Database V5	2026-08-20

Page 1 of 1