Vendor

    Amauri

    15 known vulnerabilities in products by Amauri, 0 of them actively exploited (CISA KEV).

    Key figures

    15

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Amauri
    HighCVE-2026-61984

    WordPress WPMobile.App plugin <= 11.77 - Broken Access Control vulnerability

    		7.5
    HighCVE-2024-13888

    WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter

    also in 1 other product

    		7.2
    HighCVE-2024-35694

    WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-62074

    WordPress WPMobile.App plugin <= 11.71 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-47349

    WordPress WPMobile.App plugin <= 11.50 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-43933

    WordPress WPMobile.App plugin <= 11.48 - CSRF to Stored XSS vulnerability

    		7.1
    MediumCVE-2023-22702

    WPMobile.App: Cross-site Scripting

    		6.5
    MediumCVE-2025-31475

    tarteaucitron.js allows prototype pollution via custom text injection

    also in 1 other product

    		5.5
    MediumCVE-2025-4955

    tarteaucitron.io < 1.9.5 - Contributor+ Stored XSS

    		4.7
    MediumCVE-2023-28932

    WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)

    		5.9
    MediumCVE-2023-26010

    WordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)

    		5.9
    MediumCVE-2025-31476

    tarteaucitron.js allows url scheme injection via unfiltered inputs

    also in 1 other product

    		4.8
    MediumCVE-2025-31138

    tarteaucitron.js allows UI manipulation via unrestricted CSS injection

    also in 1 other product

    		5.5
    MediumCVE-2026-22809

    tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

    also in 1 other product

    		4.4
    MediumCVE-2025-48939

    tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript

    also in 1 other product

    		4.2

    Products

    Products by Amauri
    Amauri WPMobile.App90
    Amauri tarteaucitronjs (tarteaucitron)50