cyberhobo vulnerabilities
9 published CVEs name cyberhobo among the affected products.
- 9Published CVEs9 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-7552
Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter
cyberhobo · Geo Mashup
Medium5.3 - CVE-2026-4061
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter
cyberhobo · Geo Mashup
High7.5 - CVE-2026-4062
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter
cyberhobo · Geo Mashup
High7.5 - CVE-2026-4060
Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter
cyberhobo · Geo Mashup
High7.5 - CVE-2026-6457
Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter
cyberhobo · Geo Mashup
Medium6.5 - CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2026-2416
Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter
cyberhobo · Geo Mashup
High7.5 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2024-8990
Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode
cyberhobo · Geo Mashup
Medium6.4