Vulnerabilities > Wpmessiah

DATE CVE VULNERABILITY TITLE RISK
2025-01-30 CVE-2024-12177 Cross-site Scripting vulnerability in Wpmessiah AI Image ALT Text Generator for WP
The Ai Image Alt Text Generator for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping.
network
low complexity
wpmessiah CWE-79
6.1
2025-01-30 CVE-2024-12269 Missing Authorization vulnerability in Wpmessiah Safe AI Malware Protection for WP
The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db() function in all versions up to, and including, 1.0.17.
network
low complexity
wpmessiah CWE-862
7.5