Wpmessiah vulnerabilities
We track 4 vulnerabilities in Wpmessiah products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 11, 2026.
Latest Wpmessiah vulnerabilities
- 8.8 High severity
Swiss Toolkit For WP: Unrestricted Upload of File with Dangerous Type
The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to, and including, 1.4.6. The `upload_extension_files()` function hoo
- 7.2 High severity
Frontis Blocks — Block Library for the Block…: Server-Side Request Forgery
The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'template_proxy' function. This makes it possible for unauth
- 7.5 High severity
Safe Ai Malware Protection for WP: Missing Authorization
The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db() function in all versions up to, and including, 1.0.17. This makes it possible for unauthenticated attac
- 8.8 High severity
Swiss Toolkit For WP: Authentication Bypass Using an Alternate Path or Channel
The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.7. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible for authenticated