Fahad Mahmood vulnerabilities and threats

26 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-81782Fahad Mahmood WP Docs · Cross-site Scripting Medium6.5EPSS 0.2%2026-09-10CVE Database V5CVE-2026-81782 Subscriber Cross Site Scripting (XSS) in WP Docs <= 2.3.1 versions. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2026-09-10
High	8.7	EPSS 0.5%	CVE-2026-75133Keep Backup Daily (WordPress plugin) · Missing Authentication High8.7EPSS 0.5%2026-08-31CVE Database V5CVE-2026-75133 Keep Backup Daily plugin for WordPress before 2.1.4 contains a sensitive information exposure vulnerability that allows unauthenticated attackers to trigger a full MySQL database dump by accessing the publicly exposed `kbd_cron_process` parameter without authentication. Attackers can predict the partially predictable dump filename based on the database name, a limited random range, and the current Unix timestamp to download the generated backup from the publicly accessible uploads directory. EPSS 0.5%Vulnerability Fahad Mahmood	CVE Database V5	2026-08-31
High	7.5	EPSS 0.4%	CVE-2026-28567Fahad Mahmood WP Sort Order · Missing Authorization High7.5EPSS 0.4%2026-08-18CVE Database V5CVE-2026-28567 Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions. EPSS 0.4%Vulnerability CWE-862	CVE Database V5	2026-08-18
Medium	6.5	EPSS 0.3%	CVE-2026-57419Stock Locations for WooCommerce (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-07-13CVE Database V5CVE-2026-57419 Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locations for WooCommerce: from n/a through <= 3.1.8. EPSS 0.3%Vulnerability Fahad Mahmood CWE-862	CVE Database V5	2026-07-13
Medium	5.3	EPSS 0.3%	CVE-2026-25332Endless Posts Navigation (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-02-19CVE Database V5CVE-2026-25332 Missing Authorization vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Endless Posts Navigation: from n/a through <= 2.2.9. EPSS 0.3%Vulnerability Fahad Mahmood	CVE Database V5	2026-02-19
Medium	5.4	EPSS 0.2%	CVE-2026-24990Fahad Mahmood WP Docs · Missing Authorization Medium5.4EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24990 Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through <= 2.2.8. EPSS 0.2%Vulnerability	CVE Database V5	2026-02-03
Medium	5.4	EPSS 0.2%	CVE-2025-69349RSS Feed Widget (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.2%2026-01-06CVE Database V5CVE-2025-69349 Missing Authorization vulnerability in Fahad Mahmood RSS Feed Widget rss-feed-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RSS Feed Widget: from n/a through <= 3.0.2. EPSS 0.2%Vulnerability Fahad Mahmood	CVE Database V5	2026-01-06
Medium	4.3	EPSS 0.2%	CVE-2025-62078Easy Upload Files During Checkout (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-12-31CVE Database V5CVE-2025-62078 Missing Authorization vulnerability in Fahad Mahmood Easy Upload Files During Checkout easy-upload-files-during-checkout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Upload Files During Checkout: from n/a through <= 3.0.0. EPSS 0.2%Vulnerability Fahad Mahmood CWE-862	CVE Database V5	2025-12-31
High	7.1	EPSS 0.4%	CVE-2025-47463Stock Locations for WooCommerce (WordPress plugin) · Missing Authorization High7.1EPSS 0.4%2025-06-09CVE Database V5CVE-2025-47463 Missing Authorization vulnerability in Fahad Mahmood Stock Locations for WooCommerce stock-locations-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stock Locations for WooCommerce: from n/a through <= 2.8.6. EPSS 0.4%Vulnerability Fahad Mahmood	CVE Database V5	2025-06-09
High	7.5	EPSS 0.8%	CVE-2025-30999External Store for Shopify (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.8%2025-06-06CVE Database V5CVE-2025-30999 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fahad Mahmood External Store for Shopify wp-shopify allows PHP Local File Inclusion.This issue affects External Store for Shopify: from n/a through <= 1.5.9. EPSS 0.8%Vulnerability Fahad Mahmood	CVE Database V5	2025-06-06
High	8.5	EPSS 0.5%	CVE-2025-31089Order Splitter for WooCommerce (WordPress plugin) · SQL Injection High8.5EPSS 0.5%2025-04-01CVE Database V5CVE-2025-31089 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fahad Mahmood Order Splitter for WooCommerce woo-order-splitter allows SQL Injection.This issue affects Order Splitter for WooCommerce: from n/a through <= 5.3.0. EPSS 0.5%Vulnerability Fahad Mahmood	CVE Database V5	2025-04-01
Medium	4.3	EPSS 0.2%	CVE-2025-31417Fahad Mahmood WP Docs · Missing Authorization Medium4.3EPSS 0.2%2025-03-31CVE Database V5CVE-2025-31417 Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through < 2.2.7. EPSS 0.2%Vulnerability	CVE Database V5	2025-03-31
High	7.1	EPSS 0.3%	CVE-2025-26751Alphabetic Pagination (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-02-25CVE Database V5CVE-2025-26751 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood Alphabetic Pagination alphabetic-pagination allows Reflected XSS.This issue affects Alphabetic Pagination: from n/a through <= 3.2.1. EPSS 0.3%Vulnerability Fahad Mahmood	CVE Database V5	2025-02-25
Medium	4.9	EPSS 0.5%	CVE-2025-26779Keep Backup Daily (WordPress plugin) · Path Traversal Medium4.9EPSS 0.5%2025-02-16CVE Database V5CVE-2025-26779 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a through <= 2.1.0. EPSS 0.5%Vulnerability Fahad Mahmood	CVE Database V5	2025-02-16
Medium	5.9	EPSS 0.3%	CVE-2024-56288Fahad Mahmood WP Docs · Cross-site Scripting Medium5.9EPSS 0.3%2025-01-07CVE Database V5CVE-2024-56288 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs wp-docs allows Stored XSS.This issue affects WP Docs: from n/a through <= 2.2.1. EPSS 0.3%Vulnerability	CVE Database V5	2025-01-07
High	7.1	EPSS 0.3%	CVE-2024-56223Gulri Slider (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2024-12-31CVE Database V5CVE-2024-56223 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood Gulri Slider gulri-slider allows Reflected XSS.This issue affects Gulri Slider: from n/a through <= 3.5.8. EPSS 0.3%Vulnerability Fahad Mahmood	CVE Database V5	2024-12-31
High	7.1	EPSS 0.4%	CVE-2024-54344Fahad Mahmood WP Quick Shop · Cross-site Scripting High7.1EPSS 0.4%2024-12-13CVE Database V5CVE-2024-54344 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Quick Shop wp-quick-shop allows Reflected XSS.This issue affects WP Quick Shop: from n/a through <= 1.3.1. EPSS 0.4%Vulnerability	CVE Database V5	2024-12-13
Medium	6.5	EPSS 0.4%	CVE-2024-47321Fahad Mahmood WP Datepicker · Missing Authorization Medium6.5EPSS 0.4%2024-11-01CVE Database V5CVE-2024-47321 Missing Authorization vulnerability in Fahad Mahmood WP Datepicker wp-datepicker.This issue affects WP Datepicker: from n/a through <= 2.1.1. EPSS 0.4%Vulnerability	CVE Database V5	2024-11-01
High	7.1	EPSS 0.2%	CVE-2024-49629Endless Posts Navigation (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2024-10-20CVE Database V5CVE-2024-49629 Cross-Site Request Forgery (CSRF) vulnerability in Fahad Mahmood Endless Posts Navigation endless-posts-navigation allows Stored XSS.This issue affects Endless Posts Navigation: from n/a through <= 2.2.7. EPSS 0.2%Vulnerability Fahad Mahmood	CVE Database V5	2024-10-20
High	7.5	EPSS 0.4%	CVE-2024-48024Keep Backup Daily (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere High7.5EPSS 0.4%2024-10-17CVE Database V5CVE-2024-48024 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Retrieve Embedded Sensitive Data.This issue affects Keep Backup Daily: from n/a through <= 2.1.3. EPSS 0.4%Vulnerability Fahad Mahmood	CVE Database V5	2024-10-17

Page 1 of 2