Input Validation and Logic

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.CVE-2015-9348Codepeople · 1.7% likely

   CWE-20

2. WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerabilityCVE-2024-24873CodePeople · CVSS 5.3 · 0.4% likely

   CWE-799

3. WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerabilityCVE-2026-66679codepeople · CVSS 6.5 · 0.4% likely

   CWE-1284

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.