Fable Extra (Wpfable) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-05-23. Vendor: Wpfable.

CVEs of Fable Extra

• CVE-2025-46539 - CVSS 9.3 (critical), 2025-05-23: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra fable-extra allows Blind SQL…
• CVE-2025-46468 - CVSS 9.8 (critical), 2025-05-23: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra fable-extra…
• CVE-2025-46447 - CVSS 6.5 (medium), 2025-04-24: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFable Fable Extra fable-extra allows DOM-Based…