Sprout Clients vulnerabilities | LiveThreat CVE Feed

Product

Sprout Clients

by BoldGrid · last CVE Jul 23, 2026

CVEs

On KEV

7.1

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 2Low 0

Severity

Exploitation

Watch

Add Sprout Clients to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-57428	7.1	0%	Jul 23	WordPress Sprout Clients plugin <= 3.2.3 - Cross Site Scripting (XSS) vulnerability Affected: through 3.2.3
CVE-2025-66118	7.1	0%	Dec 18	WordPress Sprout Clients plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability Affected: through 3.2.1
CVE-2026-32424	6.5	0%	Mar 13	WordPress Sprout Clients plugin <= 3.2.2 - Cross Site Scripting (XSS) vulnerability Affected: through 3.2.2
CVE-2025-31797	6.5	0%	Apr 1	WordPress Sprout Clients plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability Affected: through 3.2