Wpfable - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2026-02-19.

Products

• Fable Extra - 3 CVEs
• Shopire - 1 CVEs

Newest CVEs of Wpfable

• CVE-2025-13091 - CVSS 4.3 (medium), 2026-02-19: The Shopire theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the shopire_admin_install_plugin()…
• CVE-2025-46539 - CVSS 9.3 (critical), 2025-05-23: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra fable-extra allows Blind SQL…
• CVE-2025-46468 - CVSS 9.8 (critical), 2025-05-23: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra fable-extra…
• CVE-2025-46447 - CVSS 6.5 (medium), 2025-04-24: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFable Fable Extra fable-extra allows DOM-Based…