surbma vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20243
3. 20253
4. 20263

Newest CVEs

• CVE-2026-57764

  WordPress Surbma | Yoast SEO Breadcrumb Shortcode plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability

  Surbma · Surbma | Yoast SEO Breadcrumb Shortcode

  Medium6.5
• CVE-2026-11597

  Surbma | Infusionsoft Shortcode <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

  surbma · Surbma | Infusionsoft Shortcode

  Medium6.4
• CVE-2026-1607

  Surbma | Booking.com <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  surbma · Surbma | Booking.com Shortcode

  Medium6.4
• CVE-2025-11800

  Surbma | MiniCRM Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  surbma · Surbma | MiniCRM Shortcode

  Medium6.4
• CVE-2025-7649

  Surbma | Recent Comments Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  surbma · Surbma | Recent Comments Shortcode

  Medium6.4
• CVE-2025-22808

  WordPress Surbma | Premium WP plugin <= 9.0 - Cross Site Scripting (XSS) vulnerability

  Surbma · Surbma | Premium WP

  Medium6.5
• CVE-2024-11433

  Surbma | SalesAutopilot Shortcode <= 2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  surbma · Surbma | SalesAutopilot Shortcode

  Medium6.4
• CVE-2024-51798

  WordPress Surbma | Font Awesome plugin <= 3.0 - Cross Site Scripting (XSS) vulnerability

  Surbma · Surbma | Font Awesome

  Medium6.5
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2023-23894

  WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar Plugin <= 17.5.3 is vulnerable to Cross Site Scripting (XSS)

  Surbma · Surbma | GDPR Proof Cookie Consent & Notice Bar

  Medium6.5