AA Web Servant Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

12 Step Meeting List7 vulnerabilities

AA Web Servant vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-39570MEDIUM	WordPress 12 Step Meeting List plugin <= 3.19.9 - Sensitive Data Exposure vulnerability Insertion of Sensitive Information Into Sent Data vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Retrieve Embedded Sensitive Data.This issue affects 12 Step Meeting List: from n/a through <= 3.19.9. CWE-201Apr 8, 2026	CVSS5.3v3.1	EPSS0.24%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2026-39569MEDIUM	WordPress 12 Step Meeting List plugin <= 3.19.9 - Broken Access Control vulnerability Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through <= 3.19.9. CWE-862Apr 8, 2026	CVSS6.5v3.1	EPSS0.27%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-54054MEDIUM	WordPress 12 Step Meeting List Plugin <= 3.18.3 - Cross Site Scripting (XSS) Vulnerability Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Stored XSS.This issue affects 12 Step Meeting List: from n/a through <= 3.18.3. CWE-79Aug 14, 2025	CVSS6.5v3.1	EPSS0.21%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-24583MEDIUM	WordPress 12 Step Meeting List plugin <= 3.16.5 - Settings Change vulnerability Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through <= 3.16.5. CWE-862Apr 17, 2025	CVSS6.5v3.1	EPSS0.393%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-24582MEDIUM	WordPress 12 Step Meeting List plugin <= 3.16.5 - Sensitive Data Exposure vulnerability Insertion of Sensitive Information Into Sent Data vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Retrieve Embedded Sensitive Data.This issue affects 12 Step Meeting List: from n/a through <= 3.16.5. CWE-201Jan 24, 20251 related artifact	CVSS5.3v3.1	EPSS0.941%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template	STIX
CVE-2025-24580MEDIUM	WordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through <= 3.16.5. CWE-862Jan 24, 2025	CVSS6.5v3.1	EPSS0.622%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-35693HIGH	WordPress 12 Step Meeting List plugin <= 3.14.33 - Cross Site Scripting (XSS) vulnerability Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list.This issue affects 12 Step Meeting List: from n/a through <= 3.14.33. CWE-79Jun 8, 20241 related artifact	CVSS7.1v3.1	EPSS0.59%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template	STIX