Vulnerabilidades em fahadmahmood

13 resultados
CVE-2022-1820MEDIUMKeep Backup Daily <= 2.0.2 - Reflected Cross-Site ScriptingEPSS 1.0%CVE-2024-3895HIGHWP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateEPSS 0.9%CVE-2025-12682CRITICALEasy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File UploadEPSS 0.5%CVE-2024-12468MEDIUMWP Datepicker <= 2.1.4 - Reflected Cross-Site ScriptingEPSS 0.5%CVE-2024-12635MEDIUMWP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'EPSS 0.4%CVE-2026-3339LOWKeep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' ParameterEPSS 0.4%CVE-2026-3368HIGHInjection Guard <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via Query Parameter NameEPSS 0.3%CVE-2024-10057MEDIUMRSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos ShortcodeEPSS 0.3%CVE-2024-12405MEDIUMExport Customers Data <= 1.2.3 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-13387MEDIUMWP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-12075MEDIUMOrder Splitter for WooCommerce <= 5.3.5 - Missing Authorization to Authenticated (Subscriber+) Order Information ExposureEPSS 0.2%CVE-2026-3878MEDIUMWP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'EPSS 0.2%CVE-2026-3577MEDIUMKeep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup TitleEPSS 0.2%