CVE Intelligence

Wappointment team vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Wappointment team products: 3 record(s), with severity, exploitation and fixes.

Wappointment 3

Exploited only (KEV) →

CVE-2026-39756 Medium · 6.5 CWE-639 Oct 6, 2026
WordPress Wappointment plugin <= 2.7.7 - Insecure Direct Object References (IDOR) vulnerability
Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions.
CVE-2025-68575 Medium · 5.3 CWE-862 Dec 24, 2025
WordPress Wappointment plugin <= 2.7.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Wappointment team Wappointment wappointment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wappointment: from n/a through <= 2.7.6.
CVE-2025-67551 Medium · 6.5 CWE-79 Dec 9, 2025
WordPress Wappointment plugin <= 2.6.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wappointment team Wappointment wappointment allows Stored XSS.This issue affects Wappointment: from n/a through <= 2.6.9.