WPB Show Core

WPB Show Core has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; 3 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (67%). Other recurring categories include PHP Remote File Inclusion, Server-Side Request Forgery (SSRF).

3 of the records (50%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2022.

4 independent researchers contributed these findings, most of them (2) reported by Bob Matyas.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WPB Show Core vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2023-4922

WPB Show Core <= 2.2 - Unauthenticated Local File Inlclusion

Read the full analysis

Vulnerability Records

6 records


2024-04-18 00:00	WPB Show Core <= 2.6 - Reflected Cross-Site Scripting via 'file' WPB Show Core <= 2.6	`CVE-2024-1958`	6.1 Medium	Bob Matyas	Yes
2024-03-18 00:00	WPB Show Core <= 2.5 - Reflected Cross-Site Scripting WPB Show Core <= 2.5	`CVE-2024-1292`	6.1 Medium	Aly Khaled Aly Abd Al-aal	Yes
2024-03-18 00:00	WPB Show Core <= 2.6 - Reflected Cross-Site Scripting WPB Show Core <= 2.6	`CVE-2024-1956`	6.1 Medium	Bob Matyas	Yes
2023-11-06 00:00	WPB Show Core <= 2.2 - Unauthenticated Local File Inlclusion WPB Show Core <= 2.2	`CVE-2023-4922`	9.8 Critical	Mohamed Abdelhady	No
2023-11-06 00:00	WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery WPB Show Core <= 2.2	`CVE-2023-5974`	6.5 Medium	Mohamed Abdelhady	No
2022-10-13 00:00	WPB Show Core <= 2.2 - Reflected Cross-Site Scripting WPB Show Core *	`CVE-2022-3484`	6.1 Medium	Abdulali AlDurazi	No

Showing 1–6 of 6 reports