Amauri
4 CVEs across 3 Amauri products. Browse Amauri vulnerabilities, severities, and proof-of-concept exploits.
Amauri products with known CVEs
Amauri CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-61984 | High | 7.5 | 2026-08-13 | Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions. |
CVE-2026-22809 | Medium | 4.4 | 2026-01-13 | tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability was identified in t… |
CVE-2025-62074 | High | 7.1 | 2025-11-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobil… |
CVE-2025-48939 | Medium | 4.2 | 2025-07-03 | tarteaucitron.js is a compliant and accessible cookie banner. Prior to version 1.22.0, a vulnerability was identified in tarteaucitron.js where document.curren… |
CVE-2025-4955 | Medium | 4.7 | 2025-06-18 | The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing these parameters correctly, which could al… |
CVE-2025-31476 | Medium | 4.8 | 2025-04-07 | tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js, allowing a user with high privileges (access… |
CVE-2025-31475 | Medium | 5.5 | 2025-04-07 | tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where the addOrUpdate functio… |
CVE-2025-31138 | Medium | 5.5 | 2025-04-07 | tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where user-controlled inputs… |
CVE-2024-13888 | High | 7.2 | 2025-02-20 | The WPMobile.App plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 11.56. This is due to insufficient validation on the… |
CVE-2024-43933 | Medium | 4.3 | 2024-10-31 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja allows Stored XSS.This iss… |
CVE-2024-47349 | High | 7.1 | 2024-10-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobil… |
CVE-2024-35694 | High | 7.1 | 2024-06-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amauri WPMobile.App wpappninja.This issue affects WPMobil… |
CVE-2023-28932 | Medium | 5.9 | 2023-05-10 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.20 versions. |
CVE-2023-26010 | Medium | 5.9 | 2023-05-04 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPMobile.App plugin <= 11.18 versions. |
CVE-2023-22702 | Medium | 6.5 | 2023-03-23 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WPMobile.App WPMobile.App — Android and iOS Mobile Application plugin <= 11.13 versions. |