Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.2%	CVE-2026-62035AWS S3 for WordPress Plugin – Upcasted · Missing Authorization Medium6.3EPSS 0.2%2026-10-10CVE Database V5CVE-2026-62035 CVE-2026-62035 is a medium severity vulnerability in the AWS S3 for WordPress Plugin – Upcasted affecting versions up to 3.1.0. It involves missing authorization controls (CWE-862), which could allow unauthorized access to subscriber-level functionality or data. The vulnerability has a CVSS 3.1 base score of 6.3, indicating a moderate impact on confidentiality, integrity, and availability. A patch is available to address this issue. EPSS 0.2%Vulnerability upcasted #cwe-862	CVE Database V5	2026-10-10
Medium	6.5	EPSS 0.2%	CVE-2025-22676AWS S3 for WordPress Plugin – Upcasted · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in upcasted AWS… Medium6.5EPSS 0.2%2025-02-16CVE Database V5CVE-2025-22676 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in upcasted AWS S3 for WordPress Plugin – Upcasted upcasted-s3-offload allows Stored XSS.This issue affects AWS S3 for WordPress Plugin – Upcasted: from n/a through <= 3.0.3. EPSS 0.2%Vulnerability upcasted	CVE Database V5	2025-02-16

Showing 1–2 of 2 results