{"items":[{"id":"CVE-2023-32520","published":"2024-12-13T14:23:23.231Z","updated":"2026-04-28T16:08:23.318Z","title":"WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Webcodin","product":"WCP Contact Form","kev":false,"epss":0.0079,"kevAdded":null,"exploit":false},{"id":"CVE-2023-32519","published":"2024-12-13T14:23:22.630Z","updated":"2026-04-28T16:08:23.365Z","title":"WordPress WCP Contact Form plugin <= 3.1.0 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Webcodin","product":"WCP Contact Form","kev":false,"epss":0.00507,"kevAdded":null,"exploit":false},{"id":"CVE-2024-51707","published":"2024-11-09T12:10:19.229Z","updated":"2026-04-28T16:10:35.583Z","title":"WordPress WP Visual Adverts plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"WebCodin","product":"WP Visual Adverts","kev":false,"epss":0.00287,"kevAdded":null,"exploit":false},{"id":"CVE-2023-46638","published":"2023-11-13T00:15:23.823Z","updated":"2026-04-28T16:08:47.676Z","title":"WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)","severity":"MEDIUM","score":4.3,"vendor":"Webcodin","product":"WCP OpenWeather","kev":false,"epss":0.00309,"kevAdded":null,"exploit":false},{"id":"CVE-2023-25471","published":"2023-08-30T15:37:32.285Z","updated":"2026-04-28T16:08:08.626Z","title":"WordPress WCP OpenWeather Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"Webcodin","product":"WCP OpenWeather","kev":false,"epss":0.00486,"kevAdded":null,"exploit":false},{"id":"CVE-2023-22703","published":"2023-05-15T10:28:15.609Z","updated":"2026-04-28T16:07:59.303Z","title":"WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"Webcodin","product":"WCP Contact Form","kev":false,"epss":0.00382,"kevAdded":null,"exploit":false}]}