bgermann vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2026-39435CformsII (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-06-15CVE Database V5CVE-2026-39435 CVE-2026-39435 is a high-severity vulnerability in bgermann CformsII versions up to and including 15.1.3. It allows unauthenticated attackers to perform Cross-Site Scripting (XSS) attacks due to improper neutralization of input during web page generation. This vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected system. No official patch or remediation guidance is currently provided by the vendor. EPSS 0.2%Vulnerability bgermann CWE-79	CVE Database V5	2026-06-15
High	7.1	EPSS 0.1%	CVE-2026-39436CformsII (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2026-05-25CVE Database V5CVE-2026-39436 Cross-Site Request Forgery (CSRF) vulnerability in bgermann CformsII allows Cross Site Request Forgery. This issue affects CformsII: from n/a through 15.1.3. EPSS 0.1%Vulnerability bgermann CWE-352	CVE Database V5	2026-05-25

Page 1 of 1