Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

29 records

Vendor: Fahad Mahmood Clear all filters
TI-2026-52788 CVE-2026-75133 · GHSA-v523-g24m-hrq6

Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process

Priority MEDIUM 44

Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed `k…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0052 Published 2026-08-31 Fixed in 2.1.4 CWE-306
TI-2026-41356 CVE-2026-57419 · GHSA-24q8-rx29-p9vw

WordPress Stock Locations for WooCommerce plugin <= 3.1.8 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locati…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-07-13 No fix listed CWE-862
TI-2026-20175 CVE-2026-24990 · GHSA-vfrr-8hph-65pm

WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through <= 2.2.8.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2026-02-03 No fix listed CWE-862
TI-2025-42792 CVE-2025-69349 · GHSA-mfhq-8jf3-f9fp

WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Fahad Mahmood RSS Feed Widget rss-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RSS Feed Widget: from n/a through <= 3.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2026-01-06 No fix listed CWE-862
TI-2025-38401 CVE-2025-62078 · GHSA-mhxj-w3qp-p788

WordPress Easy Upload Files During Checkout plugin <= 3.0.0 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in Fahad Mahmood Easy Upload Files During Checkout easy-upload-files-during-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Upl…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2025-12-31 No fix listed CWE-862
TI-2025-29960 CVE-2025-47463 · GHSA-7xxh-4jmg-4jxp

WordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control Vulnerability

Priority LOW 31

Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locati…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00374 Published 2025-06-09 No fix listed CWE-862
TI-2025-22269 CVE-2025-30999 · GHSA-72x3-8f3c-phjv

WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fahad Mahmood External Store for Shopify wp-shopify allows PHP Local File Inclusion.This issue affe…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00788 Published 2025-06-06 No fix listed CWE-98
TI-2025-22359 CVE-2025-31089 · GHSA-qw5v-92q5-cgx7

WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fahad Mahmood Order Splitter for WooCommerce woo-order-splitter allows SQL Injection.This issue affects Order Splitter…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00487 Published 2025-04-01 No fix listed CWE-89
TI-2025-22598 CVE-2025-31417 · GHSA-crvq-r2jc-v9jv

WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through < 2.2.7.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00237 Published 2025-03-31 No fix listed CWE-862
TI-2025-19667 CVE-2025-26751 · GHSA-hmgj-78p9-xmxw

WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood Alphabetic Pagination alphabetic-pagination allows Reflected XSS.This issue affects Alphabetic Paginatio…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00273 Published 2025-02-25 No fix listed CWE-79
TI-2025-19694 CVE-2025-26779 · GHSA-mcfj-f39v-7ppx

WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerability

Priority LOW 23

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a throu…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00523 Published 2025-02-16 No fix listed CWE-22
TI-2024-37257 CVE-2024-56288 · GHSA-644r-qf97-j5r3

WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs wp-docs allows Stored XSS.This issue affects WP Docs: from n/a through <= 2.2.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2025-01-07 No fix listed CWE-79
TI-2024-37193 CVE-2024-56223 · GHSA-53wc-433f-29g7

WordPress Gulri Slider plugin <= 3.5.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood Gulri Slider gulri-slider allows Reflected XSS.This issue affects Gulri Slider: from n/a through <= 3.5.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-12-31 No fix listed CWE-79
TI-2024-36432 CVE-2024-54344 · GHSA-9f66-j572-p954

WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Quick Shop wp-quick-shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through <= 1…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-12-13 No fix listed CWE-79
TI-2023-15856 CVE-2023-32574 · GHSA-vgwh-f2ch-gh4f

WordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Fahad Mahmood Injection Guard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Injection Guard: from n/a through 1.2.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00415 Published 2024-12-13 No fix listed CWE-862
TI-2023-14651 CVE-2023-30873 · GHSA-2r24-7795-jp6m

WordPress WP Docs plugin <= 1.9.8 - Broken Access Control

Priority LOW 39

Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00505 Published 2024-12-09 No fix listed CWE-862
TI-2024-32226 CVE-2024-48024 · GHSA-3m79-x4pj-g3g2

WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

Priority LOW 33

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Retrieve Embedded Sensitive Data.This issue affects Keep Backup Daily:…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00421 Published 2024-10-17 No fix listed CWE-497
TI-2024-29631 CVE-2024-44042 · GHSA-rjc7-82j2-g73g

WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Datepicker wp-datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through <= 2.1.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00313 Published 2024-10-06 No fix listed CWE-79
TI-2024-23564 CVE-2024-35695 · GHSA-8ww9-2jq4-9666

WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-06-08 No fix listed CWE-79
Load more