Pfefferle vulnerabilities
We track 2 vulnerabilities in Pfefferle products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 30, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Pfefferle vulnerabilities
- 7.2 High severity
Webmention: Improper Neutralization of Input During Web Page Generation
The Webmention plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.8.0 via parser-derived 'avatar' and 'url' author metadata. This is due to insufficient input sanitization and output escaping on user-supplied MF
- 7.2 High severity
Webmention: Server-Side Request Forgery
The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function via the 'Receiver::post' function. This makes it possible for unauthenticated attackers to make