Fahad Mahmood vulnerabilities
29 CVEs and advisories name Fahad Mahmood as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-81782WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-75133Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process
- CVE-2026-28567WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability
- CVE-2026-57419WordPress Stock Locations for WooCommerce plugin <= 3.1.8 - Broken Access Control vulnerability
- CVE-2026-25332WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability
- CVE-2026-24990WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability
- CVE-2025-69349WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability
- CVE-2025-62078WordPress Easy Upload Files During Checkout plugin <= 3.0.0 - Broken Access Control vulnerability
- CVE-2025-47463WordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control Vulnerability
- CVE-2025-30999WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability
- CVE-2025-31089WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability
- CVE-2025-31417WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability
- CVE-2025-26751WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-26779WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerability
- CVE-2024-56288WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-56223WordPress Gulri Slider plugin <= 3.5.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-54344WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-32574WordPress Injection Guard plugin <= 1.2.1 - Broken Access Control vulnerability
- CVE-2023-30873WordPress WP Docs plugin <= 1.9.8 - Broken Access Control
- CVE-2024-47321WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability
- CVE-2024-49629WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability
- CVE-2024-48024WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability
- CVE-2024-44042WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-31294WordPress WP Sort Order plugin <= 1.3.1 - Broken Access Control vulnerability
- CVE-2024-35695WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-35696WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-32690WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-32106WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-44736WordPress Chameleon plugin <= 1.4.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability