Wptobe vulnerabilities
We track 2 vulnerabilities in Wptobe products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 23, 2025.
2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score
Latest Wptobe vulnerabilities
- 8.1 High severity
Wptobe-memberships: External Control of File Name or Path
The Wptobe-memberships plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the del_img_ajax_call() function in all versions up to, and including, 3.4.2. This makes it possible for authenticated attackers, w
- 7.1 High severity
Wptobe-signinup: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wptobe Wptobe-signinup wptobe-signinup allows Reflected XSS.This issue affects Wptobe-signinup: from n/a through <= 1.1.2.