CVE Intelligence

Imtiazrayhan vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Imtiazrayhan products: 4 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2024-13362 Medium · 6.1 CWE-79 May 1, 2026
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
CVE-2025-14506 Medium · 6.4 CWE-79 Jan 10, 2026
ConvertForce Popup Builder <= 0.0.7 - Stored Cross-Site Scripting via entrance_animation
The ConvertForce Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gutenberg block's `entrance_animation` attribute in all versions up to, and including, 0.0.7. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2025-64241 Medium · 4.3 CWE-862 Dec 16, 2025
WordPress WP Coupons and Deals plugin <= 3.2.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Imtiaz Rayhan WP Coupons and Deals wp-coupons-and-deals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Coupons and Deals: from n/a through <= 3.2.4.
CVE-2025-66096 Medium · 4.3 CWE-862 Nov 21, 2025
WordPress Table Block by Tableberg plugin <= 0.6.9 - Broken Access Control vulnerability
Missing Authorization vulnerability in Imtiaz Rayhan Table Block by Tableberg tableberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Table Block by Tableberg: from n/a through <= 0.6.9.