All 4 CVE vulnerabilities found in Powerkit – Supercharge your WordPress Site, with AI-generated Chinese analysis, references, and POCs.
Vendor: codesupplyco
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15644 | Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute CWE-79 | 6.4 | Medium | 2026-08-01 |
| CVE-2026-15649 | Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes CWE-79 | 6.4 | Medium | 2026-08-01 |
| CVE-2026-15645 | Powerkit <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nav' Shortcode Attribute CWE-79 | 6.4 | Medium | 2026-08-01 |
| CVE-2024-2458 | Powerkit – Supercharge your WordPress Site <= 2.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 | 6.4 | Medium | 2024-04-06 |
All 4 known CVE vulnerabilities affecting Powerkit – Supercharge your WordPress Site with full Chinese analysis, references, and POCs where available.