Fahadmahmood vulnerabilities
We track 3 vulnerabilities in Fahadmahmood products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2026.
Latest Fahadmahmood vulnerabilities
- 7.2 High severity
Injection Guard: Improper Neutralization of Input During Web Page Generation
The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9. This is due to insufficient input sanitization in the sanitize_ig_data() function which only sa
- 9.8 Critical severity
Easy Upload Files During Checkout: Unrestricted Upload of File with Dangerous Type
The Easy Upload Files During Checkout plugin for WordPress is vulnerable to arbitrary JavaScript file uploads due to missing file type validation in the 'file_during_checkout' function in all versions up to, and including, 2.9.8. This makes it possible for una
- 8.8 High severity
WP Datepicker: Missing Authorization
The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdp_add_new_datepicker_ajax() function in all versions up to, and including, 2.1.0. This makes it possible for authenticated att