Vulnerabilities in wplakeorg

3 results

CVE-2026-17580MEDIUMAdvanced Views <= 3.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'view-refresh' and 'card-refresh' REST EndpointsEPSS 0.6%CVE-2025-10380HIGHAdvanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTIEPSS 0.4%CVE-2026-109995HIGHAdvanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment ContentEPSS 0.2%