Androidbubble - vulnerabilities (CVEs)
7 CVEs in 3 products, 0 in the last 30 days, newest from 2025-01-07.
Products
- Wp Docs - 4 CVEs
- Rss Feed Widget - 2 CVEs
- Wp Sort Order - 1 CVEs
Newest CVEs of Androidbubble
- CVE-2024-56288 - CVSS 5.9 (medium), 2025-01-07: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs wp-docs allows Stored XSS.This…
- CVE-2024-12635 - CVSS 6.5 (medium), 2024-12-21: The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dir_id' parameter in all versions up to, and including, 2.2.0 due to…
- CVE-2023-30873 - CVSS 8.8 (high), 2024-12-09: Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP…
- CVE-2024-9836 - CVSS 5.9 (medium), 2024-11-12: The RSS Feed Widget WordPress plugin before 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post…
- CVE-2024-9835 - CVSS 4.8 (medium), 2024-11-12: The RSS Feed Widget WordPress plugin before 3.0.1 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could…
- CVE-2024-31294 - CVSS 8.8 (high), 2024-06-09: Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1.
- CVE-2024-35696 - CVSS 7.1 (high), 2024-06-08: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This…
