RelyWP vulnerabilities and threats

12 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3		CVE-2026-39741Simple Cloudflare Turnstile (WordPress plugin) · Missing Authorization Medium5.32026-10-29CVE Database V5CVE-2026-39741 Missing Authorization vulnerability in RelyWP Simple Cloudflare Turnstile simple-cloudflare-turnstile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Cloudflare Turnstile: from n/a through 1.44.0. Vulnerability RelyWP	CVE Database V5	2026-10-29
Medium	5.6	EPSS 0.3%	CVE-2026-66674Simple Cloudflare Turnstile (WordPress plugin) · Authentication Bypass by Spoofing Medium5.6EPSS 0.3%2026-09-10CVE Database V5CVE-2026-66674 Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile <= 1.42.1 versions. EPSS 0.3%Vulnerability Elliot Sowers/ RelyWP CWE-290	CVE Database V5	2026-09-10
Medium	6.5	EPSS 0.3%	CVE-2026-66632Simple Cloudflare Turnstile (WordPress plugin) · Code Injection Medium6.5EPSS 0.3%2026-09-10CVE Database V5CVE-2026-66632 Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions. EPSS 0.3%Vulnerability Elliot Sowers/ RelyWP CWE-94	CVE Database V5	2026-09-10
High	7.5	EPSS 0.4%	CVE-2026-49068Coupon Affiliates (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere High7.5EPSS 0.4%2026-06-15CVE Database V5CVE-2026-49068 Subscriber Sensitive Data Exposure in Coupon Affiliates <= 7.8.1 versions. EPSS 0.4%Vulnerability RelyWP CWE-497	CVE Database V5	2026-06-15
Medium	5.8	EPSS 0.3%	CVE-2026-40799Simple Cloudflare Turnstile (WordPress plugin) · Authentication Bypass Using an Alternate Path or Channel Medium5.8EPSS 0.3%2026-06-15CVE Database V5CVE-2026-40799 Unauthenticated Broken Authentication in Simple Cloudflare Turnstile <= 1.38.0 versions. EPSS 0.3%Vulnerability RelyWP CWE-288	CVE Database V5	2026-06-15
High	7.1	EPSS 0.2%	CVE-2026-40770Coupon Affiliates (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-06-15CVE Database V5CVE-2026-40770 CVE-2026-40770 is a high-severity vulnerability in RelyWP Coupon Affiliates versions up to and including 7.5.3. It is an unauthenticated cross-site scripting (XSS) flaw that allows improper neutralization of input during web page generation. The vulnerability can be triggered without authentication and may lead to partial confidentiality, integrity, and availability impacts. EPSS 0.2%Vulnerability RelyWP CWE-79	CVE Database V5	2026-06-15
Medium	5.3	EPSS 0.3%	CVE-2025-62884Coupon Affiliates (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-10-27CVE Database V5CVE-2025-62884 Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coupon Affiliates: from n/a through <= 7.2.0. EPSS 0.3%Vulnerability Elliot Sowersby / RelyWP	CVE Database V5	2025-10-27
Medium	4.3	EPSS 0.2%	CVE-2025-59567Coupon Affiliates (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-09-22CVE Database V5CVE-2025-59567 Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.8.0. EPSS 0.2%Vulnerability Elliot Sowersby / RelyWP	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.3%	CVE-2025-54025Coupon Affiliates (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2025-08-20CVE Database V5CVE-2025-54025 Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.4.0. EPSS 0.3%Vulnerability Elliot Sowersby / RelyWP	CVE Database V5	2025-08-20
Medium	6.5	EPSS 0.2%	CVE-2025-54022Coupon Affiliates (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium6.5EPSS 0.2%2025-07-16CVE Database V5CVE-2025-54022 Cross-Site Request Forgery (CSRF) vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Cross Site Request Forgery.This issue affects Coupon Affiliates: from n/a through <= 6.4.0. EPSS 0.2%Vulnerability Elliot Sowersby / RelyWP	CVE Database V5	2025-07-16
Medium	6.5	EPSS 0.3%	CVE-2025-39554AI Text to Speech (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2025-04-17CVE Database V5CVE-2025-39554 Missing Authorization vulnerability in Elliot Sowersby / RelyWP AI Text to Speech ai-text-to-speech allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Text to Speech: from n/a through <= 3.0.3. EPSS 0.3%Vulnerability Elliot Sowersby / RelyWP	CVE Database V5	2025-04-17
High	7.1	EPSS 0.4%	CVE-2024-29125Coupon Affiliates (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2024-03-19CVE Database V5CVE-2024-29125 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage.This issue affects Coupon Affiliates: from n/a through <= 5.12.7. EPSS 0.4%Vulnerability Elliot Sowersby / RelyWP	CVE Database V5	2024-03-19

Page 1 of 1