WPFable vulnerabilities
We track 2 vulnerabilities in WPFable products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 23, 2025.
2vulnerabilities
2critical
0high
0exploited
9.6average CVSS score
Latest WPFable vulnerabilities
- 9.3 Critical severity
Fable Extra: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra fable-extra allows Blind SQL Injection.This issue affects Fable Extra: from n/a through <= 1.0.6.
- 9.8 Critical severity
Fable Extra: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra fable-extra allows PHP Local File Inclusion.This issue affects Fable Extra: from n/a through <= 1.0.6.