Read the docs

nebelhorn

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

nebelhorn records in CISA KEV

No nebelhorn vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-08435 CVE-2025-9200 · GHSA-74x7-j692-9rm3

Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

Priority MEDIUM 41

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nh_ynaa_comments() function in all versions up to, and including, 0.8.8.8 due to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00363 Published 2025-10-03 No fix listed CWE-89
TI-2025-31966 CVE-2025-50053 · GHSA-j2p7-4q82-543c

Cross-site scripting in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone…

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2025-12-31 No fix listed CWE-79
Open these records in search →