Amauric vulnerabilities

Products

• Tarteaucitron.js 8
• Wpmobile.app 2
• Wpmobile.app – Android And Ios App Builder 2
• Wpmobile.app — Android And Ios Mobile Application 2

Newest

• amauric tarteaucitron.js tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge CVE-2026-111714 2.3 LowOctober 16, 2026
• amauric tarteaucitron.js tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch CVE-2026-111713 5.1 MediumOctober 16, 2026
• amauric wpmobile.app – android and ios app builder WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment CVE-2026-103421 5.4 MediumOctober 3, 2026
• amauric wpmobile.app – android and ios app builder WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter CVE-2026-94541 Public exploit 9.8 CriticalOctober 2, 2026
• amauric tarteaucitron.js tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookies CVE-2026-49977 Fix available 4.3 MediumJune 3, 2026
• amauric tarteaucitron.js, amauri tarteaucitronjs +1 more tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability CVE-2026-22809 Fix available 4.4 MediumJanuary 13, 2026
• amauric tarteaucitron.js, amauri tarteaucitronjs +1 more tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript CVE-2025-48939 Fix available 4.2 MediumJuly 3, 2025
• amauric tarteaucitron.js, amauri tarteaucitronjs +1 more tarteaucitron.js allows prototype pollution via custom text injection CVE-2025-31475 Fix available 5.5 MediumApril 7, 2025
• amauric tarteaucitron.js, amauri tarteaucitronjs +1 more tarteaucitron.js allows UI manipulation via unrestricted CSS injection CVE-2025-31138 Fix available 5.5 MediumApril 7, 2025
• amauric tarteaucitron.js, amauri tarteaucitronjs, tacjs project tacjs +2 more tarteaucitron.js allows url scheme injection via unfiltered inputs CVE-2025-31476 Fix available 4.8 MediumApril 2, 2025
• amauri wpmobile.app WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter CVE-2024-13888 7.2 HighFebruary 20, 2025
• amauri wpmobile.app WPMobile.App — Android and iOS Mobile Application <= 11.52 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-12420 6.5 MediumDecember 13, 2024
• amauric amauric/tarteaucitron.js, tarteaucitron +1 more Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js CVE-2023-3620 Fix available 4.6 MediumJuly 11, 2023
• amauri wpmobile.app, amauric wpmobile.app — android and ios mobile application, wpmobile.app — android and ios mobile application +2 more WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS) CVE-2023-28932 5.9 MediumMay 10, 2023
• amauri wpmobile.app, amauric wpmobile.app — android and ios mobile application, wpmobile.app — android and ios mobile application +2 more WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS) CVE-2023-22702 6.5 MediumMarch 23, 2023