Tangible vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-95604Loops & Logic (WordPress plugin) · Missing Authorization High7.5EPSS 0.4%2026-09-23CVE Database V5CVE-2026-95604 Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. EPSS 0.4%Vulnerability Tangible CWE-862 #ghsa-jr8w-f633-29f6	CVE Database V5	2026-09-23
Medium	6.5	EPSS 0.3%	CVE-2026-82123Tangible Loops & Logic · Cross-site Scripting Medium6.5EPSS 0.3%2026-08-28CVE Database V5CVE-2026-82123 CVE-2026-82123 is a medium severity cross-site scripting (XSS) vulnerability in the Tangible Loops & Logic product. It involves improper neutralization of input during web page generation, which could allow an attacker to inject malicious scripts. No specific affected versions or patches are currently identified. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2026-08-28
Medium	6.5	EPSS 0.2%	CVE-2026-57391Loops & Logic (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-13CVE Database V5CVE-2026-57391 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Stored XSS.This issue affects Loops & Logic: from n/a through <= 4.2.3. EPSS 0.2%Vulnerability Tangible CWE-79	CVE Database V5	2026-07-13
High	7.1	EPSS 0.3%	CVE-2024-47333Loops & Logic (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-10-06CVE Database V5CVE-2024-47333 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tangible Loops & Logic tangible-loops-and-logic allows Reflected XSS.This issue affects Loops & Logic: from n/a through <= 4.1.4. EPSS 0.3%Vulnerability Tangible	CVE Database V5	2024-10-06

Page 1 of 1 · 1 duplicate CVE record merged