Threat database

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-39548MagOne (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-06-16CVE Database V5CVE-2026-39548 Unauthenticated Cross Site Scripting (XSS) in MagOne <= 9.0 versions. EPSS 0.2%Vulnerability Sneeit #cwe-79	CVE Database V5	2026-06-16
Critical	9.8	EPSS 76%	CVE-2025-6389Sneeit Framework (WordPress plugin) · Code Injection Critical9.8EPSS 76%2025-11-25CVE Database V5CVE-2025-6389 The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeit_articles_pagination_callback() function. This is due to the function accepting user input and then passing that through call_user_func(). This makes it possible for unauthenticated attackers to execute code on the server which can be leveraged to inject backdoors or, for example, create new administrative user accounts. EPSS 76%Vulnerability Sneeit #cwe-94	CVE Database V5	2025-11-25
High	7.1	EPSS 0.3%	CVE-2025-39488MagOne (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-06-27CVE Database V5CVE-2025-39488 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit MagOne magone allows Reflected XSS.This issue affects MagOne: from n/a through <= 8.8. EPSS 0.3%Vulnerability Sneeit	CVE Database V5	2025-06-27
High	7.1	EPSS 0.3%	CVE-2025-32305Sneeit WordPress FlatNews Theme · Cross-site Scripting High7.1EPSS 0.3%2025-06-09CVE Database V5CVE-2025-32305 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sneeit WordPress FlatNews Theme flatnews allows Reflected XSS.This issue affects WordPress FlatNews Theme: from n/a through <= 5.8. EPSS 0.3%Vulnerability Sneeit	CVE Database V5	2025-06-09

Page 1 of 1