kibokolabs Vulnerability Advisory Catalog

Total 63 security vulnerabilities recorded for kibokolabs software and firmware.

← Back to All Vendors
CVE-2025-6236 MEDIUM
Component: hostel

The Hostel WordPress plugin before 1.1.5.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to ...

📅 2025-07-10
CVSS 4.8 Dossier →
CVE-2025-6234 MEDIUM
Component: hostel

The Hostel WordPress plugin before 1.1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cros...

📅 2025-07-10
CVSS 6.1 Dossier →
Component: watu_quiz

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This iss...

📅 2025-04-22
CVSS 7.6 Dossier →
Component: watu_quiz

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Watu Quiz watu allows Reflected XSS.This iss...

📅 2025-04-01
CVSS 7.1 Dossier →
Component: watu_quiz

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This iss...

📅 2024-12-02
CVSS 8.5 Dossier →
Component: namaste\!_lms

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.T...

📅 2024-10-29
CVSS 6.5 Dossier →
Component: namaste\!_lms

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Stored XSS.T...

📅 2024-10-29
CVSS 6.5 Dossier →
Component: namaste\!_lms

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Namaste! LMS namaste-lms allows Reflected XS...

📅 2024-10-29
CVSS 7.1 Dossier →
Component: namaste\!_lms

Deserialization of Untrusted Data vulnerability in Bob Namaste! LMS namaste-lms allows Object Injection.This issue affects Namaste! LMS: from n/a thro...

📅 2024-10-28
CVSS 8.8 Dossier →
Component: chained_quiz

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kiboko Labs Chained Quiz allows Stored XS...

📅 2024-07-21
CVSS 5.9 Dossier →
CVE-2024-3753 MEDIUM
Component: hostel

The Hostel WordPress plugin before 1.1.5.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cros...

📅 2024-07-13
CVSS 5.9 Dossier →
CVE-2024-2640 MEDIUM
Component: watu_quiz

The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users such as authors (if they've b...

📅 2024-07-12
CVSS 5.4 Dossier →
CVE-2024-0873 MEDIUM
Component: watu_quiz

The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'watu-basic-chart' shortcode in all versions up to, a...

📅 2024-04-09
CVSS 6.4 Dossier →
CVE-2024-0872 MEDIUM
Component: watu_quiz

The Watu Quiz plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.1 via the watu-userinfo s...

📅 2024-04-09
CVSS 4.3 Dossier →
Component: arigato_autoresponder_and_newsletter

Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions....

📅 2023-11-16
CVSS 4.3 Dossier →
CVE-2023-4602 MEDIUM
Component: namaste\!_lms

The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id' parameter in versions up to, and including,...

📅 2023-11-15
CVSS 6.1 Dossier →
Component: watu_quiz

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.9.2 versions....

📅 2023-08-14
CVSS 7.1 Dossier →
CVE-2023-0545 MEDIUM
Component: hostel

The Hostel WordPress plugin before 1.1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to ...

📅 2023-06-05
CVSS 4.8 Dossier →
Component: watu_quiz

A vulnerability was found in Watu Quiz Plugin up to 2.6.7 on WordPress. It has been rated as critical. This issue affects the function watu_exams of t...

📅 2023-06-04
CVSS 6.3 Dossier →
Component: arigato_autoresponder_and_newsletter

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions....

📅 2023-04-07
CVSS 5.9 Dossier →
Component: arigato_autoresponder_and_newsletter

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions....

📅 2023-04-07
CVSS 7.1 Dossier →
Component: chained_quiz

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Chained Quiz plugin <= 1.3.2.5 versions....

📅 2023-04-07
CVSS 5.9 Dossier →
Component: watu_quiz

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Watu Quiz plugin <= 3.3.8 versions....

📅 2023-04-07
CVSS 5.9 Dossier →
Component: arigato_autoresponder_and_newsletter

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions....

📅 2023-04-07
CVSS 6.5 Dossier →
Page 1 of 3 (63 Total Records)