WordPress security by component
12 Step Meeting List
Plugin description
12 Step Meeting List is a WordPress component with 9 published CVE records in this archive. The latest tracked vulnerability was published Apr 08, 2026; the highest CVE/CNA score is 7.1.
Plugin slug:
12-step-meeting-listLatest vulnerability
CVE-2026-39570: 12 Step Meeting List: A security weakness
12 Step Meeting List is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.19.9.
| Safe version |
|
||
|---|---|---|---|
| Apr 08, 2026 |
CVE-2026-39570
12 Step Meeting List: A security weakness
12 Step Meeting List is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.19.9.
|
3.19.10 |
CVE5.3
NVDPending
|
| Apr 08, 2026 |
CVE-2026-39569
12 Step Meeting List: A security weakness
12 Step Meeting List is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.19.9.
|
3.19.10 |
CVE6.5
NVDPending
|
| Aug 14, 2025 |
CVE-2025-54054
12 Step Meeting List: Cross-site scripting
12 Step Meeting List is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Apr 17, 2025 |
CVE-2025-24583
12 Step Meeting List: A security weakness
12 Step Meeting List is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Jan 24, 2025 |
CVE-2025-24582
12 Step Meeting List: A security weakness
12 Step Meeting List is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Jan 24, 2025 |
CVE-2025-24580
12 Step Meeting List: A security weakness
12 Step Meeting List is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Jun 10, 2024 |
CVE-2024-22296
12 Step Meeting List: A security weakness
12 Step Meeting List is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVD8.8
|
| Jun 08, 2024 |
CVE-2024-35693
12 Step Meeting List: Cross-site scripting
12 Step Meeting List is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVD6.1
|
| Dec 07, 2023 |
CVE-2023-46641
12 Step Meeting List: Server-side request forgery
12 Step Meeting List is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
|
See mitigation notes |
CVE4.9
NVD5.4
|