Advisories · Technology

Cozmoslabs WP Webhooks.

Every CVE that names Cozmoslabs WP Webhooks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-66074 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

WordPress WP Webhooks plugin <= 3.3.8 - Arbitrary File Upload vulnerability
- Cozmoslabs WP Webhooks
- Unrestricted file upload
Not analysed yet 18 Dec 2025
CVE-2025-66073 CVE record

CVSS 7.2 High

WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Injection vulnerability
- Cozmoslabs WP Webhooks
- Insecure deserialization
Not analysed yet 21 Nov 2025