Approved changes feed: RSS · Atom

cpe:2.3:a:fahad_mahmood:wp_docs:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFahad Mahmood (c2625ac9-2831-5470-a714-4d6cabe9bc7d)
ProductWp Docs (fabde3be-7667-586b-9074-1740535b55ed)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-24990 vulnerable 2026-06-03 15:16:53.736859 WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through <= 2.2.8.
Published: 2026-02-03T14:08:36.720Z
Updated: 2026-04-28T16:14:52.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31417 vulnerable 2026-06-03 15:00:30.725081 WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in Fahad Mahmood WP Docs wp-docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through < 2.2.7.
Published: 2025-03-31T06:06:30.692Z
Updated: 2026-04-28T16:12:06.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56288 vulnerable 2026-06-03 14:57:42.852366 WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs wp-docs allows Stored XSS.This issue affects WP Docs: from n/a through <= 2.2.1.
Published: 2025-01-07T10:49:16.191Z
Updated: 2026-04-28T16:10:56.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35696 vulnerable 2026-06-03 14:56:02.786105 WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Reflected XSS.This issue affects WP Docs: from n/a through 2.1.3.
Published: 2024-06-08T14:21:14.458Z
Updated: 2026-04-28T16:09:53.264Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35695 vulnerable 2026-06-03 14:56:02.783071 WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Fahad Mahmood WP Docs allows Stored XSS.This issue affects WP Docs: from n/a through 2.1.3.
Published: 2024-06-08T14:22:16.656Z
Updated: 2026-04-28T16:09:53.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32106 vulnerable 2026-06-03 14:51:57.570752 WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fahad Mahmood WP Docs plugin <= 1.9.9 versions.
Published: 2023-08-18T13:55:22.754Z
Updated: 2026-04-28T16:08:21.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30873 vulnerable 2026-06-03 14:51:54.046378 WordPress WP Docs plugin <= 1.9.8 - Broken Access Control
MEDIUM (5.4)
Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8.
Published: 2024-12-09T11:31:01.298Z
Updated: 2026-04-28T16:08:19.720Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.