Alobaidi

6 CVEs across 6 Alobaidi products. Browse Alobaidi vulnerabilities, severities, and proof-of-concept exploits.

Alobaidi products with known CVEs

ProductCVEs
Alobaidi Captcha1
Archive Page1
Extend Link1
Popad1
The Tooltip1
Video Popup1
Alobaidi CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25310Medium4.92026-02-19Server-Side Request Forgery (SSRF) vulnerability in Alobaidi Extend Link extend-link allows Server Side Request Forgery.This issue affects Extend Link: from n/…
CVE-2025-13908Medium6.42026-01-09The The Tooltip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'the_tooltip' shortcode in all versions up to, and including…
CVE-2025-9616Medium5.32025-09-04The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4. This is due to missing or incorrect non…
CVE-2025-8080Medium4.42025-08-15The Alobaidi Captcha plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.3 due…
CVE-2025-27280Medium6.52025-02-24Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alobaidi Archive Page archive-page allows DOM-Based XSS.T…
CVE-2023-4962Medium6.42024-01-11The Video PopUp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'video_popup' shortcode in versions up to, and including, 1.1.3 due to in…