Threat database

8 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-39746Booknetic · SQL Injection Critical9.3EPSS 0.4%2026-10-06CVE Database V5CVE-2026-39746 Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions. EPSS 0.4%Vulnerability fs-code #cwe-89	CVE Database V5	2026-10-06
High	8.8	EPSS 0.6%	CVE-2026-10195FS Poster - WordPress Social media Auto Poster & Scheduler [Facebook, Instagram, Twitter, Pinterest] · Command Injection High8.8EPSS 0.6%2026-09-01CVE Database V5CVE-2026-10195 The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficient input sanitization of the FFmpeg path parameter before passing it to the exec() function, combined with missing authorization checks on the REST API endpoints. This makes it possible for authenticated attackers, with subscriber-level access and above, to execute arbitrary commands on the underlying server. EPSS 0.6%Vulnerability fs-code #cwe-77	CVE Database V5	2026-09-01
High	8.1	EPSS 0.5%	CVE-2026-25439Booknetic · Authentication Bypass Using an Alternate Path or Channel High8.1EPSS 0.5%2026-06-17CVE Database V5CVE-2026-25439 Unauthenticated Broken Authentication in Booknetic <= 4.8.5 versions. EPSS 0.5%Vulnerability fs-code #cwe-288	CVE Database V5	2026-06-17
High	8.3	EPSS 0.3%	CVE-2025-30960FS Poster · Missing Authorization High8.3EPSS 0.3%2025-04-16CVE Database V5CVE-2025-30960 Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8. EPSS 0.3%Vulnerability fs-code	CVE Database V5	2025-04-16
High	7.1	EPSS 0.2%	CVE-2025-30962FS Poster · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in fs-code FS… High7.1EPSS 0.2%2025-04-15CVE Database V5CVE-2025-30962 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fs-code FS Poster fs-poster allows Reflected XSS.This issue affects FS Poster: from n/a through <= 6.5.8. EPSS 0.2%Vulnerability fs-code	CVE Database V5	2025-04-15
High	8.5	EPSS 0.3%	CVE-2025-26978FS Poster · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in fs-code FS… High8.5EPSS 0.3%2025-03-15CVE Database V5CVE-2025-26978 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8. EPSS 0.3%Vulnerability fs-code	CVE Database V5	2025-03-15
Medium	4.3	EPSS 0.2%	CVE-2025-26926Booknetic · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-02-25CVE Database V5CVE-2025-26926 Cross-Site Request Forgery (CSRF) vulnerability in fs-code Booknetic booknetic.This issue affects Booknetic: from n/a through <= 4.0.9. EPSS 0.2%Vulnerability fs-code	CVE Database V5	2025-02-25
Medium	4.3	EPSS 0.2%	CVE-2024-37237FS Poster · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37237 Cross-Site Request Forgery (CSRF) vulnerability in fs-code FS Poster fs-poster allows Cross Site Request Forgery.This issue affects FS Poster: from n/a through <= 6.5.8. EPSS 0.2%Vulnerability fs-code	CVE Database V5	2025-01-02

Showing 1–8 of 8 results