Advisories · Technology

Code for Recovery 12 Step Meeting List.

Every CVE that names Code for Recovery 12 Step Meeting List among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66584 CVE record

CVSS 7.1 High

WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability
- Code for Recovery 12 Step Meeting List
- Cross-site scripting (XSS)
Not analysed yet 24 Aug 2026
CVE-2024-22296 CVE record

CVSS 4.3 Medium

WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability
- Code for Recovery 12 Step Meeting List
- Broken access control
Not analysed yet 10 Jun 2024
CVE-2023-46641 CVE record

CVSS 4.9 Medium

WordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)
- Code for Recovery 12 Step Meeting List
- Server-side request forgery (SSRF)
Not analysed yet 7 Dec 2023