Morning Coffee

Morning Coffee has one disclosed vulnerability in the WordSec catalog, all reported in 2011; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Morning Coffee has a vendor fix available, so running the current release closes it.

Morning Coffee is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 14 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Morning Coffee vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2011-3862

Morning Coffee < 3.6 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2011-10-04 00:00	Morning Coffee < 3.6 - Cross-Site Scripting Morning Coffee < 3.6	`CVE-2011-3862`	6.1 Medium	Anonymous	Yes

Showing 1–1 of 1 reports

Latestv3.6

Morning Coffee

Author

Adazing

5.0(1)

100/100

Last Updated

2011-09-14 (15y ago)

Active Installs

60+

Downloads

58,810

Requires WP

Requires PHP

Created

2009-06-16 (18y ago)

Current events and a cup of coffee two things that definately go together. This 2 column design gives off the vibe of chatting about today's news over a cup of coffee. Relaxing, friendly and informative just what we all want our blogs to be!