Amauri records

11 published records for vendor amauri.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 90.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2025-31475No exploit	tarteaucitron.js allows prototype pollution via custom text injectionamauri · tarteaucitronjs · CWE-1321 Prototype pollution	Medium6.6	—	0.3%	Apr 7, 2025
26Monitor	CVE-2025-31138No exploit	tarteaucitron.js allows UI manipulation via unrestricted CSS injectionamauri · tarteaucitronjs · CWE-1021	Medium6.6	—	0.2%	Apr 7, 2025
24Monitor	CVE-2024-13888Proof of concept	WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameteramauri · wpmobile.app · CWE-601 Pre-auth Open redirect	Medium6.1	—	0.7%	Feb 20, 2025
24Monitor	CVE-2024-35694Proof of concept	WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerabilityamauri · wpmobile.app · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Jun 8, 2024
21Monitor	CVE-2023-22702No exploit	WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)amauri · wpmobile.app · CWE-79 XSS	Medium5.4	—	0.3%	Mar 23, 2023
19Monitor	CVE-2023-28932No exploit	WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)amauri · wpmobile.app · CWE-79 XSS	Medium4.8	—	0.3%	May 10, 2023
19Monitor	CVE-2023-26010No exploit	WordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)amauri · wpmobile.app · CWE-79 XSS	Medium4.8	—	0.3%	May 4, 2023
19Monitor	CVE-2025-31476No exploit	tarteaucitron.js allows url scheme injection via unfiltered inputsamauri · tarteaucitronjs · CWE-79 XSS	Medium4.8	—	0.3%	Apr 7, 2025
18Monitor	CVE-2025-4955No exploit	tarteaucitron.io < 1.9.5 - Contributor+ Stored XSSamauri · tarteaucitron.io · CWE-79 XSS	Medium4.7	—	0.3%	Jun 18, 2025
17Monitor	CVE-2026-22809No exploit	tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilityamauri · tarteaucitronjs · CWE-1333 Denial of service	Medium4.4	—	0.1%	Jan 13, 2026
16Monitor	CVE-2025-48939No exploit	tarteaucitron.js vulnerable to DOM Clobbering via document.currentScriptamauri · tarteaucitronjs · CWE-138	Medium4.2	—	0.2%	Jul 3, 2025

CVE-2025-31475
26Monitor
tarteaucitron.js allows prototype pollution via custom text injection
MediumCVSS 6.6No exploitEPSS 0%
- Prototype pollution
amauri · tarteaucitronjsApr 7, 2025
CVE-2025-31138
26Monitor
tarteaucitron.js allows UI manipulation via unrestricted CSS injection
MediumCVSS 6.6No exploitEPSS 0%
amauri · tarteaucitronjsApr 7, 2025
CVE-2024-13888
24Monitor
WPMobile.App <= 11.56 - Open Redirect via 'redirect' Parameter
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- Open redirect
amauri · wpmobile.appFeb 20, 2025
CVE-2024-35694
24Monitor
WordPress WPMobile.App plugin <= 11.41 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
amauri · wpmobile.appJun 8, 2024
CVE-2023-22702
21Monitor
WordPress WPMobile.App — Android and iOS Mobile Application Plugin <= 11.13 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
amauri · wpmobile.appMar 23, 2023
CVE-2023-28932
19Monitor
WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
amauri · wpmobile.appMay 10, 2023
CVE-2023-26010
19Monitor
WordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
amauri · wpmobile.appMay 4, 2023
CVE-2025-31476
19Monitor
tarteaucitron.js allows url scheme injection via unfiltered inputs
MediumCVSS 4.8No exploitEPSS 0%
- XSS
amauri · tarteaucitronjsApr 7, 2025
CVE-2025-4955
18Monitor
tarteaucitron.io < 1.9.5 - Contributor+ Stored XSS
MediumCVSS 4.7No exploitEPSS 0%
- XSS
amauri · tarteaucitron.ioJun 18, 2025
CVE-2026-22809
17Monitor
tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
MediumCVSS 4.4No exploitEPSS 0%
- Denial of service
amauri · tarteaucitronjsJan 13, 2026
CVE-2025-48939
16Monitor
tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript
MediumCVSS 4.2No exploitEPSS 0%
amauri · tarteaucitronjsJul 3, 2025