Skip to contentFahadmahmood vulnerabilities
Newest
- fahad mahmood wp docsWordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-817826.5 Medium
- fahad mahmood keep backup dailyKeep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_processCVE-2026-751338.7 High
- fahad mahmood easy upload files during checkoutEasy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'eufdc-delete' ParameterCVE-2026-68025.3 Medium
- fahadmahmood wp docsWP Docs <= 2.2.9 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpdocs_options[icon_size]'CVE-2026-38786.4 Medium
- fahadmahmood keep backup dailyKeep Backup Daily <= 2.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Backup TitleCVE-2026-35774.4 Medium
- fahadmahmood injection guardInjection Guard <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via Query Parameter NameCVE-2026-33687.2 High
- fahadmahmood keep backup dailyKeep Backup Daily <= 2.1.1 - Authenticated (Admin+) Limited Path Traversal via 'kbd_path' ParameterCVE-2026-33392.7 Low
- fahad mahmood order splitter for woocommerceOrder Splitter for WooCommerce <= 5.3.5 - Missing Authorization to Authenticated (Subscriber+) Order Information ExposureCVE-2025-120754.3 Medium
- fahad mahmood wp docsWordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerabilityCVE-2026-249905.4 Medium
- fahad mahmood easy upload files during checkoutEasy Upload Files During Checkout <= 2.9.8 - Unauthenticated Arbitrary JavaScript File UploadCVE-2025-126829.8 Critical
- fahadmahmood injection guardInjection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']CVE-2025-80466.1 Medium
- unknown wp shopify, fahadmahmood external store for shopify +1 moreWP Shopify < 1.5.4 - Reflected XSSCVE-2025-78086.1 Medium
- fahad mahmood wp docsWordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerabilityCVE-2025-314174.3 Medium
- fahad mahmood keep backup dailyWordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerabilityCVE-2025-267794.9 Medium
- fahadmahmood wp responsive tabsWP Responsive Tabs <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-133876.4 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-562885.9 Medium
- androidbubbles wp datepickerWP Datepicker <= 2.1.4 - Reflected Cross-Site ScriptingCVE-2024-124686.1 Medium
- fahadmahmood export customers dataExport Customers Data <= 1.2.3 - Reflected Cross-Site ScriptingCVE-2024-124056.1 Medium
- androidbubble wp docsWP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'CVE-2024-126356.5 Medium
- fahad mahmood injection guardWordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerabilityCVE-2023-325744.3 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 1.9.8 - Broken Access ControlCVE-2023-308735.4 Medium
- androidbubble rss feed widgetRSS Feed Widget < 3.0.1 - Reflected XSSCVE-2024-98354.8 Medium
- androidbubbles wp datepickerWordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerabilityCVE-2024-473216.5 Medium
- fahad mahmood rss feed widgetRSS Feed Widget <= 2.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos ShortcodeCVE-2024-100576.4 Medium
- fahad mahmood keep backup dailyWordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerabilityCVE-2024-480247.5 High
- androidbubbles wp datepickerWordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440425.9 Medium
- fahad mahmood wp docsWordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-356956.5 Medium
- androidbubble wp docsWordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-356967.1 High
- androidbubbles wp datepickerWP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateCVE-2024-38958.8 High
- fahad mahmood wp docsWordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-321067.1 High
- androidbubbles keep backup dailyKeep Backup Daily <= 2.0.2 - Reflected Cross-Site ScriptingCVE-2022-18206.1 Medium