Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Androidbubble Clear all filters
TI-2024-37257 CVE-2024-56288 · GHSA-644r-qf97-j5r3

WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs wp-docs allows Stored XSS.This issue affects WP Docs: from n/a through <= 2.2.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2025-01-07 No fix listed CWE-79
TI-2024-11722 CVE-2024-12635 · GHSA-96gf-mwjr-4cr8

WP Docs <= 2.2.0 - Authenticated (Subscriber+) Time-Based SQL Injection via 'dir_id'

Priority LOW 29

The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dir_id' parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of su…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0044 Published 2024-12-21 No fix listed CWE-89
TI-2023-14651 CVE-2023-30873 · GHSA-2r24-7795-jp6m

WordPress WP Docs plugin <= 1.9.8 - Broken Access Control

Priority LOW 39

Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00505 Published 2024-12-09 No fix listed CWE-862
TI-2024-23565 CVE-2024-35696 · GHSA-8rr2-455x-wf4x

WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This issue affects WP Docs: from n/a through 2.1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-06-08 No fix listed CWE-79