All products

webmention

WordPress · Plugin
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Webmention <= 5.10.1 - Unauthenticated Stored Cross-Site Scripting via Open Graph og:title Meta TagCVE-2026-111109 webmention WordPress Medium Fix reported
Webmention <= 5.8.0 - Unauthenticated Stored Cross-Site Scripting via MF2 'photo'/'url' Author PropertiesCVE-2026-10513 webmention WordPress High Fix reported
Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request ForgeryCVE-2026-0686 webmention WordPress High Fix reported
Webmention <= 5.6.2 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2026-0688 webmention WordPress Medium Fix reported
Webmention <= 4.0.8 - Reflected Cross-Site Scripting via 'replytocom' webmention WordPress Medium Fix reported