amauric vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20255
4. 20266

Newest CVEs

• CVE-2026-111714

  tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge

  AmauriC · tarteaucitron.js

  Low2.3
• CVE-2026-111713

  tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch

  AmauriC · tarteaucitron.js

  Medium5.1
• CVE-2026-103421

  WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment

  amauric · WPMobile.App – Android and iOS App Builder

  Medium5.4
• CVE-2026-94541

  WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter

  amauric · WPMobile.App – Android and iOS App Builder

  Critical9.8
• CVE-2026-49977

  tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookies

  AmauriC · tarteaucitron.js

  Medium4.3
• CVE-2026-22809

  tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

  AmauriC · tarteaucitron.js

  Medium4.4
• CVE-2025-48939

  tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript

  AmauriC · tarteaucitron.js

  Medium4.2
• CVE-2025-31476

  tarteaucitron.js allows url scheme injection via unfiltered inputs

  AmauriC · tarteaucitron.js

  Medium4.8
• CVE-2025-31475

  tarteaucitron.js allows prototype pollution via custom text injection

  AmauriC · tarteaucitron.js

  Medium5.5
• CVE-2025-31138

  tarteaucitron.js allows UI manipulation via unrestricted CSS injection

  AmauriC · tarteaucitron.js

  Medium5.5