Wpdirectorykit Sweet Energy Efficiency vulnerabilities

2 vulnerabilities

Known vulnerabilities in Wpdirectorykit Sweet Energy Efficiency, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2025-14618wordpresssweet-energy-efficiency+1
EPSS score
0.24%
The Sweet Energy Efficiency plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on the 'sweet_energy_efficiency_action' AJAX handler in all versions up to, and including, 1.0.6. This makes it possible for authenticated attackers, with subscriber level access and above, to read, modify, and delete arbitrary graphs.7.1CVE-2025-58262wordpresssweet-energy-efficiency+1
EPSS score
0.13%
Cross-Site Request Forgery (CSRF) vulnerability in WPDirectoryKit Sweet Energy Efficiency sweet-energy-efficiency allows Stored XSS.This issue affects Sweet Energy Efficiency: from n/a through <= 1.0.8.