Read the docs

WPFable

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WPFable records in CISA KEV

No WPFable vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-29186 CVE-2025-46468 · GHSA-58mp-vjj5-c38v

WordPress Fable Extra plugin <= 1.0.6 - Local File Inclusion Vulnerability

Priority MEDIUM 50

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra fable-extra allows PHP Local File Inclusion.This issue affects Fable Extra: fro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00637 Published 2025-05-23 No fix listed CWE-98
TI-2025-29257 CVE-2025-46539 · GHSA-735c-m362-rv89

WordPress Fable Extra plugin <= 1.0.6 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra fable-extra allows Blind SQL Injection.This issue affects Fable Extra: from n/a through <= 1.0.6.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00441 Published 2025-05-23 No fix listed CWE-89
TI-2025-29165 CVE-2025-46447 · GHSA-6x6f-xrjg-fm44

WordPress Fable Extra plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFable Fable Extra fable-extra allows DOM-Based XSS.This issue affects Fable Extra: from n/a through <= 1.0.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00266 Published 2025-04-24 No fix listed CWE-79
Open these records in search →