Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: nebelhorn Clear all filters
TI-2025-31966 CVE-2025-50053 · GHSA-j2p7-4q82-543c

Cross-site scripting in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone…

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App yournewsapp allows Reflected XSS…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2025-12-31 No fix listed CWE-79
TI-2025-08435 CVE-2025-9200 · GHSA-74x7-j692-9rm3

Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

Priority MEDIUM 41

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nh_ynaa_comments() function in all versions up to, and including, 0.8.8.8 due to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00363 Published 2025-10-03 No fix listed CWE-89