Vendor

Amauric

13 known vulnerabilities in products by Amauric, 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Amauric

Critical	CVE-2026-94541	WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter	9.8	02.10.2026
High	CVE-2024-13888	WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter also in 1 other product	7.2	20.02.2025
Medium	CVE-2026-103421	Amauric WPMobile.App: Cross-site Scripting	5.4	03.10.2026
Medium	CVE-2026-111713	tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch	5.4	16.10.2026
Medium	CVE-2026-49977	tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookies also in 4 other products	4.3	17.07.2026
Medium	CVE-2024-12420	Amauric WPMobile.App: Code Injection	6.5	13.12.2024
Low	CVE-2026-111714	tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge	3.1	16.10.2026
Medium	CVE-2025-31475	tarteaucitron.js allows prototype pollution via custom text injection also in 1 other product	5.5	07.04.2025
Medium	CVE-2023-3620	Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js	4.6	11.07.2023
Medium	CVE-2025-31476	tarteaucitron.js allows url scheme injection via unfiltered inputs also in 1 other product	4.8	07.04.2025
Medium	CVE-2025-31138	tarteaucitron.js allows UI manipulation via unrestricted CSS injection also in 1 other product	5.5	07.04.2025
Medium	CVE-2026-22809	tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability also in 1 other product	4.4	13.01.2026
Medium	CVE-2025-48939	tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript also in 1 other product	4.2	03.07.2025

Products by Amauric

Tarteaucitron.js	8	0