simonholliday vulnerabilities

Products

• Anomify AI – Anomaly Detection and Alerting 2

Latest simonholliday CVEs

Newest publication first

1. CVE-2026-6405 Anomify AI <= 0.3.6 - Cross-Site Request Forgery

   Published 2026-05-20

   Medium·CVSS 4.3 EPSS 0.17%

   The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in versions up to and including 0.3.6. This is due to missing nonce verification on the settings page handler and i...

2. CVE-2026-6404 Anomify AI <= 0.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'anomify_api_key' Parameter

   Published 2026-05-20

   Medium·CVSS 4.4 EPSS 0.24%

   The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'anomify_api_key' parameter in versions up to and including 0.3.6. This is due to insufficient input sanitization and missing output escaping: the plugin appl...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.