Skip to content
OpenAdvisories

Vendor

WPFable

4 known vulnerabilities.

Products

Fable Extra 3 Shopire 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-46468

    WordPress Fable Extra plugin <= 1.0.6 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WPFable Fable Extra fable-extra allows PHP Local File Inclusion.This issue affects Fable Extra: from n/a through <= 1.0.6.

    WPFable Fable Extra
  • Critical 9.3
    CVE-2025-46539

    WordPress Fable Extra plugin <= 1.0.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFable Fable Extra fable-extra allows Blind SQL Injection.This issue affects Fable Extra: from n/a through <= 1.0.6.

    WPFable Fable Extra