CVE-2023-46641

CVE-2023-46641: The WordPress plugin 12 Step Meeting List is vulnerable to Server-Side Request Forgery (SSRF) in versions

CVE-2024-22296

CVE-2024-22296 corresponds to a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin 12 Step Meeting List. Public records show affected versions are 3.14.28 and earlier, with exploitation potential via an unauthenticated or improperly authorized access to the plugin...

CVE-2024-35693

The Code for Recovery 12 Step Meeting List WordPress plugin, versions up to and including 3.14.33 , is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, which allows an attacker to execute malicious scripts in a...