Known vulnerabilities in Quttera ThreatSign – Web Malware Scanner for WordPress
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-115548 | Quttera ThreatSign <= 4.1.0.48 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header | 7.2 High | Nov 7, 2026 |
| CVE-2025-8013 | The Quttera Web Malware Scanner plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,… | 3.8 Low | Aug 15, 2025 |