wpcraft vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.9	EPSS 0.3%	CVE-2025-57956WooMS (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.3%2025-09-22CVE Database V5CVE-2025-57956 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpcraft WooMS wooms allows Stored XSS.This issue affects WooMS: from n/a through <= 9.12. EPSS 0.3%Vulnerability wpcraft	CVE Database V5	2025-09-22
Medium	5.3	EPSS 0.4%	CVE-2025-57957WooMS (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.4%2025-09-22CVE Database V5CVE-2025-57957 Missing Authorization vulnerability in wpcraft WooMS wooms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooMS: from n/a through <= 9.12. EPSS 0.4%Vulnerability wpcraft	CVE Database V5	2025-09-22
High	7.1	EPSS 0.3%	CVE-2025-32602WooMS (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-04-17CVE Database V5CVE-2025-32602 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpcraft WooMS wooms allows Reflected XSS.This issue affects WooMS: from n/a through <= 9.12. EPSS 0.3%Vulnerability wpcraft	CVE Database V5	2025-04-17

Page 1 of 1