Ollybach vulnerabilities and threats

5 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-40796WPPizza (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium6.5EPSS 0.3%2026-06-15CVE Database V5CVE-2026-40796 CVE-2026-40796 is a vulnerability in WPPizza versions up to and including 3.19.9 that results in exposure of subscriber sensitive data to unauthorized parties. The issue is classified under CWE-497, indicating exposure of sensitive system information to an unauthorized control sphere. The vulnerability has a CVSS 3.1 base score of 6.5, reflecting a medium severity level. No official patch or remediation guidance is currently available from the vendor. The vulnerability does not require user interaction but requires low privileges to exploit and impacts confidentiality without affecting integrity or availability. EPSS 0.3%Vulnerability ollybach CWE-497	CVE Database V5	2026-06-15
Medium	4.3	EPSS 0.2%	CVE-2025-57894WPPizza (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-08-22CVE Database V5CVE-2025-57894 Missing Authorization vulnerability in ollybach WPPizza wppizza allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPPizza: from n/a through <= 3.19.8. EPSS 0.2%Vulnerability ollybach	CVE Database V5	2025-08-22
High	7.1	EPSS 0.3%	CVE-2025-26991WPPizza (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-02-25CVE Database V5CVE-2025-26991 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ollybach WPPizza wppizza allows Reflected XSS.This issue affects WPPizza: from n/a through <= 3.19.4. EPSS 0.3%Vulnerability ollybach	CVE Database V5	2025-02-25
High	7.1	EPSS 0.3%	CVE-2024-35766WPPizza (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-06-21CVE Database V5CVE-2024-35766 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ollybach WPPizza allows Reflected XSS.This issue affects WPPizza: from n/a through 3.18.13. EPSS 0.3%Vulnerability ollybach CWE-79	CVE Database V5	2024-06-21
Medium	6.5	EPSS 0.5%	CVE-2024-33576WPPizza (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.5%2024-05-06CVE Database V5CVE-2024-33576 Missing Authorization vulnerability in Ollybach WPPizza.This issue affects WPPizza: from n/a through 3.18.10. EPSS 0.5%Vulnerability Ollybach CWE-862	CVE Database V5	2024-05-06

Page 1 of 1