Bob
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Namaste! LMS | 6 | – | Feb 24, 2025 |
| Hostel | 5 | – | Dec 24, 2025 |
| Watu Quiz | 5 | – | Dec 24, 2025 |
| Chained Quiz | 2 | – | Oct 29, 2026 |
| Arigato Autoresponder and Newsletter | 1 | – | Apr 17, 2025 |
| Likert Survey Master | 1 | – | Oct 22, 2025 |
Exploited and recent CVEs
- CVE-2026-108494 WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-68587 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability 0.2%
- CVE-2023-32120 WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS) 0.2%
- CVE-2025-66119 WordPress Hostel plugin <= 1.1.5.9 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-67976 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability 0.3%
- CVE-2025-53426 WordPress Likert Survey Master plugin <= 0.8.0.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-46242 WordPress Watu Quiz plugin <= 3.4.3 - SQL Injection Vulnerability 0.4%
- CVE-2025-39594 WordPress Arigato Autoresponder and Newsletter plugin <= 2.7.2.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-39566 WordPress Hostel plugin <= 1.1.5.6 - SQL Injection Vulnerability 0.6%
- CVE-2025-30844 WordPress Watu Quiz plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) Vulnerability 0.4%
- CVE-2025-30848 WordPress Hostel plugin <= 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-31102 WordPress Hostel plugin <= 1.1.5.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-27353 WordPress Namaste! LMS Plugin <= 2.6.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2025-24701 WordPress Chained Quiz Plugin <= 1.3.2.9 - Server Side Request Forgery (SSRF) vulnerability 0.3%
- CVE-2024-53809 WordPress Namaste! LMS plugin <= 2.6.4.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-53792 WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability 0.5%
- CVE-2024-50407 WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-50409 WordPress Namaste! LMS plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-50410 WordPress Namaste! LMS plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-50408 WordPress Namaste! LMS plugin <= 2.6.3 - PHP Object Injection vulnerability 0.5%