Fahad Mahmood vulnerabilities and threats

26 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.9	EPSS 0.3%	CVE-2024-44042Fahad Mahmood WP Datepicker · Cross-site Scripting Medium5.9EPSS 0.3%2024-10-06CVE Database V5CVE-2024-44042 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Datepicker wp-datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through <= 2.1.1. EPSS 0.3%Vulnerability	CVE Database V5	2024-10-06
Medium	4.3	EPSS 0.3%	CVE-2024-31294Fahad Mahmood WP Sort Order · Missing Authorization Medium4.3EPSS 0.3%2024-06-09CVE Database V5CVE-2024-31294 Missing Authorization vulnerability in Fahad Mahmood WP Sort Order.This issue affects WP Sort Order: from n/a through 1.3.1. EPSS 0.3%Vulnerability CWE-862	CVE Database V5	2024-06-09
Medium	6.5	EPSS 0.3%	CVE-2024-35695Fahad Mahmood WP Docs · XSS or 'Cross-site Scripting' Medium6.5EPSS 0.3%2024-06-08CVE Database V5CVE-2024-35695 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-06-08
High	7.1	EPSS 0.3%	CVE-2024-35696Fahad Mahmood WP Docs · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-06-08CVE Database V5CVE-2024-35696 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This issue affects WP Docs: from n/a through 2.1.3. EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-06-08
Medium	5.9	EPSS 0.3%	CVE-2024-32690RSS Feed Widget (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.3%2024-04-22CVE Database V5CVE-2024-32690 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood RSS Feed Widget allows Stored XSS.This issue affects RSS Feed Widget: from n/a through 2.9.7. EPSS 0.3%Vulnerability Fahad Mahmood CWE-79	CVE Database V5	2024-04-22
Medium	5.9	EPSS 0.4%	CVE-2024-22153Stock Locations for WooCommerce (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.4%2024-01-31CVE Database V5CVE-2024-22153 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood & Alexandre Faustino Stock Locations for WooCommerce allows Stored XSS.This issue affects Stock Locations for WooCommerce: from n/a through 2.5.9. EPSS 0.4%Vulnerability Fahad Mahmood & Alexandre Faustino CWE-79	CVE Database V5	2024-01-31

Page 2 of 2