Skip to contentFahad Mahmood vulnerabilities
Newest
- fahad mahmood wp docsWordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-817826.5 Medium
- fahad mahmood keep backup dailyKeep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_processCVE-2026-751338.7 High
- fahad mahmood wp sort orderWordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerabilityCVE-2026-285677.5 High
- fahad mahmood stock locations for woocommerceWordPress Stock Locations for WooCommerce plugin <= 3.1.8 - Broken Access Control vulnerabilityCVE-2026-574196.5 Medium
- fahad mahmood easy upload files during checkoutEasy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'eufdc-delete' ParameterCVE-2026-68025.3 Medium
- fahad mahmood endless posts navigationWordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerabilityCVE-2026-253325.3 Medium
- fahad mahmood order splitter for woocommerceOrder Splitter for WooCommerce <= 5.3.5 - Missing Authorization to Authenticated (Subscriber+) Order Information ExposureCVE-2025-120754.3 Medium
- fahad mahmood wp docsWordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerabilityCVE-2026-249905.4 Medium
- fahad mahmood rss feed widgetWordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerabilityCVE-2025-693495.4 Medium
- fahad mahmood easy upload files during checkoutWordPress Easy Upload Files During Checkout plugin <= 3.0.0 - Broken Access Control vulnerabilityCVE-2025-620784.3 Medium
- fahad mahmood easy upload files during checkoutEasy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File UploadCVE-2025-126829.8 Critical
- fahad mahmood stock locations for woocommerceWordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control VulnerabilityCVE-2025-474637.1 High
- fahad mahmood external store for shopifyWordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerabilityCVE-2025-309997.5 High
- fahad mahmood order splitter for woocommerceWordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection VulnerabilityCVE-2025-310898.5 High
- fahad mahmood wp docsWordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerabilityCVE-2025-314174.3 Medium
- fahad mahmood alphabetic paginationWordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-267517.1 High
- fahad mahmood keep backup dailyWordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerabilityCVE-2025-267794.9 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-562885.9 Medium
- fahad mahmood gulri sliderWordPress Gulri Slider plugin <= 3.5.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-562237.1 High
- fahad mahmood wp quick shopWordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-543447.1 High
- fahad mahmood injection guardWordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerabilityCVE-2023-325744.3 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 1.9.8 - Broken Access ControlCVE-2023-308735.4 Medium
- androidbubble rss feed widget, rss feed widget project feed widget +1 moreRSS Feed Widget < 3.0.0 - Contributor+ Stored XSSCVE-2024-98365.9 Medium
- androidbubble rss feed widgetRSS Feed Widget < 3.0.1 - Reflected XSSCVE-2024-98354.8 Medium
- androidbubbles wp datepickerWordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerabilityCVE-2024-473216.5 Medium
- androidbubbles endless posts navigationWordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerabilityCVE-2024-496297.1 High
- fahad mahmood rss feed widgetRSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos ShortcodeCVE-2024-100576.4 Medium
- fahad mahmood keep backup dailyWordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerabilityCVE-2024-480247.5 High
- androidbubbles wp datepickerWordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440425.9 Medium
- androidbubble wp sort orderWordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerabilityCVE-2024-312944.3 Medium
- fahad mahmood wp docsWordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-356956.5 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-356967.1 High
- fahad mahmood rss feed widgetWordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-326905.9 Medium
- fahad mahmood stock locations for woocommerceWordPress Stock Locations for WooCommerce Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)CVE-2024-221535.9 Medium
- fahad mahmood wp docsWordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-321067.1 High
- chameleon project chameleon, fahad mahmood chameleon (wordpress plugin) +1 moreWordPress Chameleon plugin <= 1.4.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2022-447364.8 Medium