AM
Vendor
AmauriC
11
CVEs
0
On KEV
4
New 30D
Products
WA9.8
WPMobile.App – Android and iOS App Builder
amauric
2 CVEs0 on KEV2 new
TA6.6
tarteaucitron.js
AmauriC
8 CVEs0 on KEV2 new
WP6.1
WPMobile.App
amauric
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111714 | TA tarteaucitron.js AmauriC | 3.1 | Oct 16 | tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge |
| CVE-2026-111713 | TA tarteaucitron.js AmauriC | 5.4 | Oct 16 | tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch |
| CVE-2026-103421 | WA WPMobile.App – Android and iOS App Builder amauric | 5.4 | Oct 3 | WPMobile.App <= 11.84 - Unauthenticated Stored Cross-Site Scripting via '/android_json/search/<value>/0' Path Segment |
| CVE-2026-94541 | WA WPMobile.App – Android and iOS App Builder amauric | 9.8 | Oct 2 | WPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter |
| CVE-2026-49977 | TA tarteaucitron.js AmauriC | 4.3 | Jul 17 | tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookies |
| CVE-2026-22809 | TA tarteaucitron.js AmauriC | 4.4 | Jan 13 | tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability |
| CVE-2025-48939 | TA tarteaucitron.js AmauriC | 4.2 | Jul 3 | tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript |
| CVE-2025-31476 | TA tarteaucitron.js AmauriC | 4.8 | Apr 7 | tarteaucitron.js allows url scheme injection via unfiltered inputs |
| CVE-2025-31475 | TA tarteaucitron.js AmauriC | 6.6 | Apr 7 | tarteaucitron.js allows prototype pollution via custom text injection |
| CVE-2025-31138 | TA tarteaucitron.js AmauriC | 6.6 | Apr 7 | tarteaucitron.js allows UI manipulation via unrestricted CSS injection |
| CVE-2024-13888 | WP WPMobile.App amauric | 6.1 | Feb 20 | WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter |