All 5 CVE vulnerabilities found in WorkScout-Core, with AI-generated Chinese analysis, references, and POCs.
Vendor: purethemes
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-57786 | WordPress WorkScout-Core plugin <= 1.7.08 - Cross Site Request Forgery (CSRF) to Broken Authentication vulnerability CWE-352 | 8.8 | High | 2026-07-13 |
| CVE-2026-52716 | WordPress WorkScout-Core plugin <= 1.7.11 - Arbitrary File Deletion vulnerability CWE-22 | 6.5 | Medium | 2026-06-17 |
| CVE-2025-67960 | WordPress WorkScout-Core plugin <= 1.7.06 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-01-22 |
| CVE-2025-59571 | WordPress WorkScout-Core plugin < 1.7.06 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2025-10-22 |
| CVE-2025-59572 | WordPress WorkScout-Core Plugin < 1.7.06 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 | 8.8 | High | 2025-09-22 |
All 5 known CVE vulnerabilities affecting WorkScout-Core with full Chinese analysis, references, and POCs where available.