Karim42

3 CVEs in 2 Karim42 products, including Quran Multilanguage Text & Audio, Quran Live Multilanguage. Newest: CVE-2026-4074 (2026-04-22).

Karim42 products with known CVEs

ProductCVEs
Quran Multilanguage Text & Audio2
Quran Live Multilanguage1
Karim42 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4074Medium6.42026-04-22The Quran Live Multilanguage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cheikh' and 'lang' shortcode attributes in all versions…
CVE-2025-47524Medium5.92025-05-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in karim42 Quran multilanguage Text & Audio quran-text-multi…
CVE-2024-11973Medium6.12024-12-10The Quran multilanguage Text & Audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sourate' and 'lang' parameter in all version…