Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Bob — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting Bob. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Bob serves as a critical business application handling sensitive data processing and user authentication. Historically, Bob has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, contributing to its 19 CVE count. Notable security characteristics include insufficient input validation and weak session management. Major incidents include a 2022 data breach affecting 50,000 records due to an unpatched RCE vulnerability, and a 2020 XSS incident that led to session hijacking attacks across multiple enterprise clients. Regular security assessments have identified persistent authentication bypass issues in legacy versions.

CVE ID Title CVSS Severity Published
CVE-2025-68587 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability — Watu Quiz CWE-862 4.3 Medium 2025-12-24
CVE-2023-32120 WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS) — Hostel CWE-79 5.9 Medium 2025-12-24
CVE-2025-66119 WordPress Hostel plugin <= 1.1.5.9 - Cross Site Scripting (XSS) vulnerability — Hostel CWE-79 7.1 High 2025-12-18
CVE-2025-67976 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability — Watu Quiz CWE-862 6.5 Medium 2025-12-16
CVE-2025-53426 WordPress Likert Survey Master plugin <= 0.8.0.1 - Cross Site Scripting (XSS) vulnerability — Likert Survey Master CWE-79 7.1 High 2025-10-22
CVE-2025-46242 WordPress Watu Quiz plugin <= 3.4.3 - SQL Injection Vulnerability — Watu Quiz CWE-89 7.6 High 2025-04-22
CVE-2025-39594 WordPress Arigato Autoresponder and Newsletter plugin <= 2.7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability — Arigato Autoresponder and Newsletter CWE-79 7.1 High 2025-04-17
CVE-2025-39566 WordPress Hostel plugin <= 1.1.5.6 - SQL Injection Vulnerability — Hostel CWE-89 7.6 High 2025-04-16
CVE-2025-30844 WordPress Watu Quiz plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) Vulnerability — Watu Quiz CWE-79 7.1 High 2025-04-01
CVE-2025-30848 WordPress Hostel plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability — Hostel CWE-79 7.1 High 2025-04-01
CVE-2025-31102 WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability — Hostel CWE-79 7.1 High 2025-03-28
CVE-2025-27353 WordPress Namaste! LMS Plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) vulnerability — Namaste! LMS CWE-352 4.3 Medium 2025-02-24
CVE-2025-24701 WordPress Chained Quiz Plugin <= 1.3.2.9 - Server Side Request Forgery (SSRF) vulnerability — Chained Quiz CWE-918 4.4 Medium 2025-01-24
CVE-2024-53809 WordPress Namaste! LMS plugin <= 2.6.4.1 - Cross Site Request Forgery (CSRF) vulnerability — Namaste! LMS CWE-352 4.3 Medium 2024-12-06
CVE-2024-53792 WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability — Watu Quiz CWE-89 8.5 High 2024-12-02
CVE-2024-50407 WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability — Namaste! LMS CWE-79 7.1 High 2024-10-29
CVE-2024-50409 WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability — Namaste! LMS CWE-79 6.5 Medium 2024-10-29
CVE-2024-50410 WordPress Namaste! LMS plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability — Namaste! LMS CWE-79 6.5 Medium 2024-10-29
CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability — Namaste! LMS CWE-502 8.8 High 2024-10-28

This page lists every published CVE security advisory associated with Bob. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.