Threat database

8 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.2	EPSS 0.3%	CVE-2026-39729Edwiser Bridge · Insertion of Sensitive Information Into Sent Data High7.2EPSS 0.3%2026-10-06CVE Database V5CVE-2026-39729 Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions. EPSS 0.3%Vulnerability WisdmLabs #cwe-201	CVE Database V5	2026-10-06
Medium	5.4	EPSS 0.2%	CVE-2026-24570Edwiser Bridge · Missing Authorization Medium5.4EPSS 0.2%2026-01-23CVE Database V5CVE-2026-24570 Missing Authorization vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Edwiser Bridge: from n/a through <= 4.3.2. EPSS 0.2%Vulnerability WisdmLabs	CVE Database V5	2026-01-23
Medium	6.4	EPSS 0.2%	CVE-2025-13887AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in wisdmlabs AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code Medium6.4EPSS 0.2%2026-01-07CVE Database V5CVE-2025-13887 The AI BotKit – AI Chatbot & Live Support for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the `ai_botkit_widget` shortcode in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.2%Vulnerability wisdmlabs #cwe-79	CVE Database V5	2026-01-07
High	7.1	EPSS 0.3%	CVE-2025-24593Edwiser Bridge · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WisdmLabs… High7.1EPSS 0.3%2025-01-27CVE Database V5CVE-2025-24593 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Reflected XSS.This issue affects Edwiser Bridge: from n/a through <= 3.0.8. EPSS 0.3%Vulnerability WisdmLabs	CVE Database V5	2025-01-27
Medium	6.5	EPSS 0.3%	CVE-2024-49311Edwiser Bridge · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in WisdmLabs… Medium6.5EPSS 0.3%2024-10-17CVE Database V5CVE-2024-49311 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge allows Stored XSS.This issue affects Edwiser Bridge: from n/a through <= 3.0.7. EPSS 0.3%Vulnerability WisdmLabs	CVE Database V5	2024-10-17
Medium	4.9	EPSS 0.2%	CVE-2024-49312Edwiser Bridge · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2024-10-17CVE Database V5CVE-2024-49312 Server-Side Request Forgery (SSRF) vulnerability in WisdmLabs Edwiser Bridge edwiser-bridge.This issue affects Edwiser Bridge: from n/a through <= 3.0.7. EPSS 0.2%Vulnerability WisdmLabs	CVE Database V5	2024-10-17
Critical	9.8	EPSS 0.9%	CVE-2024-4186Edwiser Bridge – WordPress Moodle Integration · Authentication Bypass Using an Alternate Path or Channel Critical9.8EPSS 0.9%2024-05-07CVE Database V5CVE-2024-4186 The Edwiser Bridge plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.5. This is due to the 'eb_user_email_verification_key' default value is empty, and the not empty check is missing in the 'eb_user_email_verify' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the user id. This can only be exploited if the 'Email Verification' setting is enabled. EPSS 0.9%Vulnerability wisdmlabs #cwe-288	CVE Database V5	2024-05-07
High	7.6	EPSS 0.5%	CVE-2024-31260Edwiser Bridge · SQL Injection High7.6EPSS 0.5%2024-04-07CVE Database V5CVE-2024-31260 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WisdmLabs Edwiser Bridge.This issue affects Edwiser Bridge: from n/a through 3.0.2. EPSS 0.5%Vulnerability WisdmLabs #cwe-89	CVE Database V5	2024-04-07

Showing 1–8 of 8 results