stmcan vulnerabilities and threats

8 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-57745RT-Theme 18 \| Extensions · Cross-site Scripting High7.1EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57745 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Reflected XSS.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5. EPSS 0.3%Vulnerability stmcan CWE-79	CVE Database V5	2026-07-13
Critical	9.8	EPSS 0.6%	CVE-2026-57744RT-Theme 18 \| Extensions · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-07-13CVE Database V5CVE-2026-57744 Deserialization of Untrusted Data vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Object Injection.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5. EPSS 0.6%Vulnerability stmcan CWE-502	CVE Database V5	2026-07-13
High	8.1	EPSS 0.6%	CVE-2026-57743RT-Theme 18 \| Extensions · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-07-13CVE Database V5CVE-2026-57743 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5. EPSS 0.6%Vulnerability stmcan CWE-98	CVE Database V5	2026-07-13
Medium	5.3	EPSS 0.3%	CVE-2026-39711RT-Theme 18 \| Extensions · Insertion of Sensitive Information Into Sent Data Medium5.3EPSS 0.3%2026-04-08CVE Database V5CVE-2026-39711 Insertion of Sensitive Information Into Sent Data vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Retrieve Embedded Sensitive Data.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5. EPSS 0.3%Vulnerability stmcan	CVE Database V5	2026-04-08
Medium	5.4	EPSS <0.1%	CVE-2026-39710RT-Theme 18 \| Extensions · Cross-Site Request Forgery (CSRF) Medium5.4EPSS <0.1%2026-04-08CVE Database V5CVE-2026-39710 Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.5. EPSS <0.1%Vulnerability stmcan	CVE Database V5	2026-04-08
High	7.1	EPSS 0.2%	CVE-2026-25018NaturaLife Extensions (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-25CVE Database V5CVE-2026-25018 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in stmcan NaturaLife Extensions naturalife-extensions allows Reflected XSS.This issue affects NaturaLife Extensions: from n/a through <= 2.1. EPSS 0.2%Vulnerability stmcan	CVE Database V5	2026-03-25
High	8.1	EPSS 0.4%	CVE-2026-25017NaturaLife Extensions (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.4%2026-03-25CVE Database V5CVE-2026-25017 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan NaturaLife Extensions naturalife-extensions allows PHP Local File Inclusion.This issue affects NaturaLife Extensions: from n/a through <= 2.1. EPSS 0.4%Vulnerability stmcan	CVE Database V5	2026-03-25
High	7.5	EPSS 0.6%	CVE-2025-32288RT-Theme 18 \| Extensions · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.6%2025-08-14CVE Database V5CVE-2025-32288 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in stmcan RT-Theme 18 \| Extensions rt18-extensions allows PHP Local File Inclusion.This issue affects RT-Theme 18 \| Extensions: from n/a through <= 2.4. EPSS 0.6%Vulnerability stmcan	CVE Database V5	2025-08-14

Page 1 of 1