Read the docs

wptobe

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

wptobe records in CISA KEV

No wptobe vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-08292 CVE-2025-9048 · GHSA-g832-wq36-x2w6

Wptobe-memberships <= 3.4.2 - Authenticated (Subscriber+) Arbitrary File Deletion

Priority LOW 36

The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions up to, and including, 3.4.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0065 Published 2025-08-23 No fix listed CWE-73
TI-2025-21886 CVE-2025-30611 · GHSA-hr3m-hm82-5jpq

WordPress Wptobe-signinup plugin <= 1.1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wptobe Wptobe-signinup wptobe-signinup allows Reflected XSS.This issue affects Wptobe-signinup: from n/a through <= 1.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00299 Published 2025-04-03 No fix listed CWE-79
Open these records in search →