Skip to content
OpenAdvisories

Vendor

Bob

20 known vulnerabilities.

Products

Namaste! LMS 6 Hostel 5 Watu Quiz 5 Chained Quiz 2 Arigato Autoresponder and Newsletter 1 Likert Survey Master 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.1
    CVE-2026-108494

    WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions.

    Bob Chained Quiz
  • High 7.1
    CVE-2025-66119

    WordPress Hostel plugin <= 1.1.5.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through <= 1.1.5.9.

    Bob Hostel
  • High 7.1
    CVE-2025-53426

    WordPress Likert Survey Master plugin <= 0.8.0.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Likert Survey Master likert-survey-master allows Reflected XSS.This issue affects Likert Survey Master: from n/a through <= 0.8.0.1.

    Bob Likert Survey Master
  • High 7.6
    CVE-2025-46242

    WordPress Watu Quiz plugin <= 3.4.3 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through <= 3.4.3.

    Bob Watu Quiz
  • High 7.1
    CVE-2025-39594

    WordPress Arigato Autoresponder and Newsletter plugin <= 2.7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Arigato Autoresponder and Newsletter bft-autoresponder allows Reflected XSS.This issue affects Arigato Autoresponder and Newsletter: from n/a through <= …

    Bob Arigato Autoresponder and Newsletter
  • High 7.6
    CVE-2025-39566

    WordPress Hostel plugin <= 1.1.5.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Hostel hostel allows Blind SQL Injection.This issue affects Hostel: from n/a through <= 1.1.5.6.

    Bob Hostel
  • High 7.1
    CVE-2025-30844

    WordPress Watu Quiz plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Watu Quiz watu allows Reflected XSS.This issue affects Watu Quiz: from n/a through <= 3.4.2.

    Bob Watu Quiz
  • High 7.1
    CVE-2025-30848

    WordPress Hostel plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through <= 1.1.5.

    Bob Hostel
  • High 7.1
    CVE-2025-31102

    WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Hostel hostel allows Reflected XSS.This issue affects Hostel: from n/a through <= 1.1.5.5.

    Bob Hostel
  • High 8.5
    CVE-2024-53792

    WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through <= 3.4.1.2.

    Bob Watu Quiz
  • High 7.1
    CVE-2024-50407

    WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Reflected XSS.This issue affects Namaste! LMS: from n/a through <= 2.6.2.

    Bob Namaste! LMS
  • High 8.8
    CVE-2024-50408

    WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a through <= 2.6.3.

    Bob Namaste! LMS