Advisories · Technology

WPSight WPCasa.

Every CVE that names WPSight WPCasa among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-62043 CVE record

CVSS 6.5 Medium

WordPress WPCasa plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability
- WPSight WPCasa
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2026
CVE-2025-9321 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WPCasa <= 1.4.1 - Unauthenticated Code Injection
- wpsight WPCasa
- Code injection
Not analysed yet 23 Sept 2025
CVE-2025-39575 CVE record

CVSS 6.5 Medium

WordPress WPCasa plugin <= 1.3.2 - Cross Site Scripting (XSS) Vulnerability
- WPSight WPCasa
- Cross-site scripting (XSS)
Not analysed yet 16 Apr 2025
CVE-2024-53826 CVE record

CVSS 5.3 Medium

WordPress WPCasa plugin <= 1.2.13 - Insecure Direct Object References (IDOR) vulnerability
- WPSight WPCasa
- Broken access control
Not analysed yet 6 Dec 2024