Devfelixmoira vulnerabilities
We track 2 vulnerabilities in Devfelixmoira products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 20, 2025.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Devfelixmoira vulnerabilities
- 7.1 High severity
Knowledge Base – Knowledge Base Maker: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in devfelixmoira Knowledge Base – Knowledge Base Maker knowledge-base-maker allows Stored XSS.This issue affects Knowledge Base – Knowledge Base Maker: from n/a through <= 1.1.8.
- 7.2 High severity
Popup More Popups, Lightboxes, and more popup…: Improper Limitation of a Pathname to a Restricted Directory
The Popup More Popups, Lightboxes, and more popup modules plugin for WordPress is vulnerable to Local File Inclusion in version 2.1.6 via the ycfChangeElementData() function. This makes it possible for authenticated attackers, with administrator-level access a