AmauriC has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 5.4 (medium), with 1 rated critical. Most affected products: WPMobile.App – Android and iOS App Builder (2), tarteaucitron.js (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Weakness classes
Products
- WPMobile.App – Android and iOS App Builder 2
- tarteaucitron.js 2
Worst active — by depth score
CVE-2026-94541Critical· 9.8The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform a…66CVE-2026-111713Medium· 5.4tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch30CVE-2026-103421Medium· 5.4The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI (path segment after /android_json/search/)' parameter in all versions up to, and including, 11.84 due t…30CVE-2026-111714Low· 3.1tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge17
AmauriC vulnerabilities
CVEs affecting AmauriC, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-111714Low· 3.1tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge
tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to block visitor pages by supplying unescaped cookie names to cookie.purge. Attackers can plant a cookie from a sibling su…
CVE-2026-111713Medium· 5.4tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch
tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr resolves 'data-' prefixed attributes while the https-only guard validates the unprefixed attribute. Attackers who can place markup, such as …
CVE-2026-103421Medium· 5.4The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI (path segment after /android_json/search/)' parameter in all versions up to, and including, 11.84 due t…
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI (path segment after /android_json/search/)' parameter in all versions up to, and including, 11.84 due t…
CVE-2026-94541Critical· 9.8PoCThe WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform a…
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform a…