wbolt.com vulnerabilities

Products

• IMGspider 1
• Online Contact Widget 1
• Smart SEO Tool 1
• Spider Analyser – WordPress搜索引擎蜘蛛分析插件 1

Latest wbolt.com CVEs

Newest publication first

1. CVE-2026-32472 WordPress Online Contact Widget plugin <= 1.3.0 - Broken Access Control vulnerability

   Published 2026-08-18

   High·CVSS 7.5 EPSS 0.39%

   Unauthenticated Broken Access Control in Online Contact Widget <= 1.3.0 versions.

2. CVE-2026-65553 WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability

   Published 2026-08-06

   Critical·CVSS 10.0 EPSS 0.86%

   Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.

3. CVE-2026-65533 WordPress Smart SEO Tool plugin <= 4.1.2 - Cross Site Scripting (XSS) vulnerability

   Published 2026-07-23

   Medium·CVSS 6.5 EPSS 0.22%

   Contributor Cross Site Scripting (XSS) in Smart SEO Tool <= 4.1.2 versions.

4. CVE-2026-22482 WordPress IMGspider plugin <= 2.3.12 - Server Side Request Forgery (SSRF) vulnerability

   Published 2026-01-22

   Medium·CVSS 4.9 EPSS 0.17%

   Server-Side Request Forgery (SSRF) vulnerability in wbolt.com IMGspider imgspider allows Server Side Request Forgery.This issue affects IMGspider: from n/a through <= 2.3.12.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.