Vendor

    Fahad Mahmood

    30 known vulnerabilities in products by Fahad Mahmood, 0 of them actively exploited (CISA KEV).

    Key figures

    30

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Fahad Mahmood
    HighCVE-2026-75133

    Keep Backup Daily WordPress Plugin < 2.1.4 Sensitive Information Exposure via kbd_cron_process

    		7.5
    HighCVE-2025-30999

    WordPress External Store for Shopify plugin <= 1.5.9 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2026-28567

    WordPress WP Sort Order plugin <= 1.3.5 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-127216

    Injection Guard WordPress Plugin < 1.4.0 CSRF Password Hash Disclosure

    		6.5
    HighCVE-2025-31089

    WordPress Order Splitter for WooCommerce plugin <= 5.3.0 - SQL Injection Vulnerability

    		8.5
    MediumCVE-2026-81782

    WordPress WP Docs plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-57419

    WordPress Stock Locations for WooCommerce plugin <= 3.1.8 - Broken Access Control vulnerability

    		6.5
    HighCVE-2024-48024

    WordPress Keep Backup Daily plugin <= 2.1.3 - Sensitive Data Exposure vulnerability

    		7.5
    HighCVE-2025-47463

    WordPress Stock Locations for WooCommerce plugin <= 2.8.6 - Broken Access Control Vulnerability

    		7.1
    HighCVE-2024-54344

    WordPress WP Quick Shop plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    CriticalCVE-2024-47321

    WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability

    also in 1 other product

    		6.5
    HighCVE-2023-30873

    WordPress WP Docs plugin <= 1.9.8 - Broken Access Control

    also in 1 other product

    		5.4
    MediumCVE-2025-26779

    WordPress Keep Backup Daily plugin <= 2.1.0 - Arbitrary File Download vulnerability

    		4.9
    HighCVE-2023-32106

    WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    HighCVE-2025-26751

    WordPress Alphabetic Pagination Plugin <= 3.2.1 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-56223

    WordPress Gulri Slider plugin <= 3.5.8 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-35696

    WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2026-25332

    WordPress Endless Posts Navigation plugin <= 2.2.9 - Broken Access Control vulnerability

    		5.3
    HighCVE-2024-49629

    WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability

    also in 1 other product

    		7.1
    MediumCVE-2024-56288

    WordPress WP Docs plugin <= 2.2.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2026-24990

    WordPress WP Docs plugin <= 2.2.8 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2024-35695

    WordPress WP Docs plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2025-69349

    WordPress RSS Feed Widget plugin <= 3.0.2 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2024-44042

    WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2024-32690

    WordPress RSS Feed Widget plugin <= 2.9.7 - Cross Site Scripting (XSS) vulnerability

    		5.9

    All vulnerabilities in search

    Products

    Products by Fahad Mahmood
    Wp Docs90
    Keep Backup Daily30