12 Step Meeting List

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   12 Step Meeting List

Information

Software Type Plugin
Software Slug 12-step-meeting-list (view on wordpress.org)
Software Status Active
Software Author aasanjose
Software Downloads 130,602
Software Active Installs 900
Software Record Last Updated July 17, 2026

9 Vulnerabilities

Submit a Vulnerability
12 Step Meeting List <= 3.19.9 - Missing Authorization
4.3
CVE-2026-39569
Mar 22, 2026
Researcher: Bao - BlueRock
12 Step Meeting List <= 3.19.9 - Unauthenticated Information Exposure
5.3
CVE-2026-39570
Mar 22, 2026
Researcher: Bao - BlueRock
12 Step Meeting List <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-54054
Aug 14, 2025
Researchers:
12 Step Meeting List <= 3.16.5 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-24582
Jan 24, 2025
Researcher: Kévin Mosbahi (Mika)
12 Step Meeting List <= 3.16.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion
4.3
CVE-2025-24580
Jan 24, 2025
Researcher: Kévin Mosbahi (Mika)
12 Step Meeting List <= 3.16.5 - Missing Authorization to Unauthenticated Settings Update
5.3
CVE-2025-24583
Dec 18, 2024
Researchers:
12 Step Meeting List <= 3.14.33 - Reflected Cross-Site Scripting
6.1
CVE-2024-35693
Jun 6, 2024
Researcher: alien8
12 Step Meeting List <= 3.14.28 - Missing Authorization
5.3
CVE-2024-22296
Jan 17, 2024
Researcher: emad
12 Step Meeting List <= 3.14.24 - Authenticated (Contributor+) Server-Side Request Forgery
6.4
CVE-2023-46641
Nov 27, 2023
Researcher: Shahzaib Ali Khan
Title Status CVE ID CVSS Researchers Date
12 Step Meeting List <= 3.19.9 - Missing Authorization Patched CVE-2026-39569 4.3 Bao - BlueRock March 22, 2026
12 Step Meeting List <= 3.19.9 - Unauthenticated Information Exposure Patched CVE-2026-39570 5.3 Bao - BlueRock March 22, 2026
12 Step Meeting List <= 3.18.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-54054 6.4 August 14, 2025
12 Step Meeting List <= 3.16.5 - Unauthenticated Sensitive Information Exposure Patched CVE-2025-24582 5.3 Kévin Mosbahi (Mika) January 24, 2025
12 Step Meeting List <= 3.16.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Content Deletion Patched CVE-2025-24580 4.3 Kévin Mosbahi (Mika) January 24, 2025
12 Step Meeting List <= 3.16.5 - Missing Authorization to Unauthenticated Settings Update Patched CVE-2025-24583 5.3 December 18, 2024
12 Step Meeting List <= 3.14.33 - Reflected Cross-Site Scripting Patched CVE-2024-35693 6.1 alien8 June 6, 2024
12 Step Meeting List <= 3.14.28 - Missing Authorization Patched CVE-2024-22296 5.3 emad January 17, 2024
12 Step Meeting List <= 3.14.24 - Authenticated (Contributor+) Server-Side Request Forgery Patched CVE-2023-46641 6.4 Shahzaib Ali Khan November 27, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation