wbolt.com vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.5	EPSS 0.4%	CVE-2026-32472Online Contact Widget (WordPress plugin) · Missing Authorization High7.5EPSS 0.4%2026-08-18CVE Database V5CVE-2026-32472 Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions. EPSS 0.4%Vulnerability wbolt.com CWE-862	CVE Database V5	2026-08-18
Critical	10.0	EPSS 0.9%	CVE-2026-65553wbolt.com Spider Analyser – WordPress搜索引擎蜘蛛分析插件 · Code Injection Critical10.0EPSS 0.9%2026-08-06CVE Database V5CVE-2026-65553 CVE-2026-65553 is a critical vulnerability in the Spider Analyser WordPress plugin (versions up to 2.1.3) that allows unauthenticated remote code execution due to improper control of code generation (CWE-94). This vulnerability has a CVSS score of 10, indicating it is highly severe with network attack vector, no privileges or user interaction required, and complete impact on confidentiality, integrity, and availability. EPSS 0.9%Vulnerability CWE-94 #ghsa-hq89-64jw-675j	CVE Database V5	2026-08-06
Medium	6.5	EPSS 0.2%	CVE-2026-65533Smart SEO Tool (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65533 Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions. EPSS 0.2%Vulnerability wbolt.com CWE-79	CVE Database V5	2026-07-23
Medium	4.9	EPSS 0.2%	CVE-2026-22482IMGspider (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2026-01-22CVE Database V5CVE-2026-22482 Server-Side Request Forgery (SSRF) vulnerability in wbolt.com IMGspider imgspider allows Server Side Request Forgery.This issue affects IMGspider: from n/a through <= 2.3.12. EPSS 0.2%Vulnerability wbolt.com	CVE Database V5	2026-01-22

Page 1 of 1