surbma vulnerabilities
10 published CVEs name surbma among the affected products.
- 10Published CVEs10 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-57764
WordPress Surbma | Yoast SEO Breadcrumb Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Surbma · Surbma | Yoast SEO Breadcrumb Shortcode
Medium6.5 - CVE-2026-11597
Surbma | Infusionsoft Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
surbma · Surbma | Infusionsoft Shortcode
Medium6.4 - CVE-2026-1607
Surbma | Booking.com <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
surbma · Surbma | Booking.com Shortcode
Medium6.4 - CVE-2025-11800
Surbma | MiniCRM Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
surbma · Surbma | MiniCRM Shortcode
Medium6.4 - CVE-2025-7649
Surbma | Recent Comments Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
surbma · Surbma | Recent Comments Shortcode
Medium6.4 - CVE-2025-22808
WordPress Surbma | Premium WP plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability
Surbma · Surbma | Premium WP
Medium6.5 - CVE-2024-11433
Surbma | SalesAutopilot Shortcode <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
surbma · Surbma | SalesAutopilot Shortcode
Medium6.4 - CVE-2024-51798
WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability
Surbma · Surbma | Font Awesome
Medium6.5 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2023-23894
WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar Plugin <= 17.5.3 is vulnerable to Cross Site Scripting (XSS)
Surbma · Surbma | GDPR Proof Cookie Consent & Notice Bar
Medium6.5