CVE Intelligence

Bob vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Bob products: 5 record(s), with severity, exploitation and fixes.

Watu Quiz 2Hostel 2Likert Survey Master 1

Exploited only (KEV) →

CVE-2025-68587 Medium · 4.3 CWE-862 Dec 24, 2025
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through <= 3.4.5.
CVE-2023-32120 Medium · 5.9 CWE-79 Dec 24, 2025
WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bob Hostel allows DOM-Based XSS.This issue affects Hostel: from n/a through 1.1.5.1.
CVE-2025-66119 High · 7.1 CWE-79 Dec 18, 2025
WordPress Hostel plugin <= 1.1.5.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through <= 1.1.5.9.
CVE-2025-67976 Medium · 6.5 CWE-862 Dec 16, 2025
WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through <= 3.4.5.
CVE-2025-53426 High · 7.1 CWE-79 Oct 22, 2025
WordPress Likert Survey Master plugin <= 0.8.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Likert Survey Master likert-survey-master allows Reflected XSS.This issue affects Likert Survey Master: from n/a through <= 0.8.0.1.