Vulnerabilities in amauric
13 resultsCVE-2024-13888HIGHWPMobile.App <= 11.56 - Open Redirect via 'redirect' ParameterEPSS 0.8%CVE-2023-3620MEDIUMCross-site Scripting (XSS) - Stored in amauric/tarteaucitron.jsEPSS 0.5%CVE-2026-94541CRITICALWPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' ParameterEPSS 0.5%CVE-2024-12420MEDIUMWPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.4%CVE-2025-31476MEDIUMtarteaucitron.js allows url scheme injection via unfiltered inputsEPSS 0.4%CVE-2026-49977MEDIUMtarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookiesEPSS 0.4%CVE-2025-31475MEDIUMtarteaucitron.js allows prototype pollution via custom text injectionEPSS 0.4%CVE-2025-31138MEDIUMtarteaucitron.js allows UI manipulation via unrestricted CSS injectionEPSS 0.3%CVE-2026-103421MEDIUMWPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path SegmentEPSS 0.2%CVE-2026-111714LOWtarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purgeEPSS 0.2%CVE-2025-48939MEDIUMtarteaucitron.js vulnerable to DOM Clobbering via document.currentScriptEPSS 0.2%CVE-2026-111713MEDIUMtarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation MismatchEPSS 0.2%CVE-2026-22809MEDIUMtarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilityEPSS 0.1%