{"items":[{"id":"CVE-2026-66584","published":"2026-08-24T11:39:34.110Z","updated":"2026-08-24T12:51:11.006Z","title":"WordPress 12 Step Meeting List plugin <= 3.19.16 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Code for Recovery","product":"12 Step Meeting List","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2024-22296","published":"2024-06-10T08:07:57.694Z","updated":"2026-04-28T16:09:09.316Z","title":"WordPress 12 Step Meeting List plugin <= 3.14.28 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Code for Recovery","product":"12 Step Meeting List","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2023-46641","published":"2023-12-07T10:55:27.082Z","updated":"2026-04-28T16:08:47.863Z","title":"WordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)","severity":"MEDIUM","score":4.9,"vendor":"Code for Recovery","product":"12 Step Meeting List","kev":false,"epss":0.00312,"kevAdded":null}]}