Skip to content
OpenAdvisories

Vendor

WP Messiah

19 known vulnerabilities.

Products

Ai Image Alt Text Generator for WP 5 Swiss Toolkit For WP 4 Safe Ai Malware Protection for WP 2 WP AI CoPilot 2 WP Mobile Bottom Menu 1 BoomDevs WordPress Coming Soon 1 Frontis Blocks 1 Frontis Blocks — Block Library for the Block Editor 1 Prime Elementor Addons – Lightweight Elementor Widgets for Faster Pages 1 TOP Table Of Contents 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2026-2354

    Swiss Toolkit For WP <= 1.4.6 - Authenticated (Author+) Arbitrary File Upload via upload_extension_files()

    The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to, and including, 1.4.6. The `upload_extension_files()` function ho…

    WP Messiah Swiss Toolkit For WP Web / CMS
  • High 7.2
    CVE-2026-0807

    Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter

    The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'template_proxy' function. This makes it possible for unaut…

    WP Messiah Frontis Blocks — Block Library for the Block Editor Web / CMS
  • High 7.2
    CVE-2025-68030

    WordPress Frontis Blocks plugin <= 1.1.5 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in WP Messiah Frontis Blocks frontis-blocks allows Server Side Request Forgery.This issue affects Frontis Blocks: from n/a through <= 1.1.5.

    WP Messiah Frontis Blocks
  • High 8.2
    CVE-2025-58207

    WordPress Ai Image Alt Text Generator for WP Plugin <= 1.1.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in WP Messiah Ai Image Alt Text Generator for WP ai-image-alt-text-generator-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ai Image Alt Text Generator for WP: from n/a thr…

    WP Messiah Ai Image Alt Text Generator for WP
  • High 7.5
    CVE-2024-12269

    Safe Ai Malware Protection for WP <= 1.0.17 - Missing Authorization to Unauthenticated Database Export

    The Safe Ai Malware Protection for WP plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db() function in all versions up to, and including, 1.0.17. This makes it possible for unauthenticated atta…

    WP Messiah Safe Ai Malware Protection for WP Web / CMS
  • High 8.8
    CVE-2024-5204

    Swiss Toolkit For WP <= 1.0.7 - Authenticated (Contributor+) Authentication Bypass

    The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.7. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible for authenticated…

    WP Messiah Swiss Toolkit For WP Web / CMS