cyberhobo vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20267

Newest CVEs

• CVE-2026-7552

  Geo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter

  cyberhobo · Geo Mashup

  Medium5.3
• CVE-2026-4061

  Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'map_post_type' Parameter

  cyberhobo · Geo Mashup

  High7.5
• CVE-2026-4062

  Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'object_ids' Parameter

  cyberhobo · Geo Mashup

  High7.5
• CVE-2026-4060

  Geo Mashup <= 1.13.18 - Unauthenticated Time-Based SQL Injection via 'sort' Parameter

  cyberhobo · Geo Mashup

  High7.5
• CVE-2026-6457

  Geo Mashup <= 1.13.19 - Authenticated (Subscriber+) SQL Injection via 'geo_mashup_null_fields' Parameter

  cyberhobo · Geo Mashup

  Medium6.5
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-2416

  Geo Mashup <= 1.13.17 - Unauthenticated SQL Injection via 'sort' Parameter

  cyberhobo · Geo Mashup

  High7.5
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-8990

  Geo Mashup <= 1.13.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via geo_mashup_visible_posts_list Shortcode

  cyberhobo · Geo Mashup

  Medium6.4