Specific Content For Mobile Vulnerabilities

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to SQL Injection via the eos_scfm_duplicate_post_as_draft() function in all versions up to, and including, 0.5.5 due to insufficient escaping on the user supplied parameter and lack of sufficient prepa...

CVSS:

6.5

Affected:

up to 0.5.5

Fixed in:

0.5.6

Disclosed:

Nov 11, 2025

CVE-2025-11454 on NVD →

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 0.5.3. This makes it possible for authenticated attackers, with Contributor-level access and...

CVSS:

4.3

Affected:

up to 0.5.3

Fixed in:

0.5.4

Disclosed:

Mar 27, 2025

CVE-2025-30874 on NVD →

The Specific Content For Mobile – Customize the mobile version without redirections plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 0.1.9.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject ar...

CVSS:

6.1

Affected:

up to 0.1.9.5

Fixed in:

0.1.9.6

Disclosed:

Mar 16, 2024

CVE-2024-29126 on NVD →