PatchTheCVEtapatalk vulnerabilities and fixes
Recent CVEs affecting tapatalk, with upgrade or downgrade steps. 5 tracked.
tapatalk has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2017-10-26. Highest priority: CVE-2014-2023 (score 67/100).
- CVE-2017-14652 CRITICAL 9.8 UPGRADE SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allow
- CVE-2014-8870 MEDIUM 5.8 DOWNGRADE Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin befo
- CVE-2014-8869 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk (com.ta
- CVE-2014-5680 MEDIUM 5.4 DOWNGRADE The Tapatalk (aka com.quoord.tapatalkpro.activity) application 4.8.0 for Android does not verify X.509 certifi
- CVE-2014-2023 CRITICAL 9.8 DOWNGRADE Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBul
FAQ
How do I fix tapatalk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tapatalk being exploited right now?
None of the tracked tapatalk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tapatalk CVE should I patch first?
CVE-2014-2023 currently ranks highest (67/100): Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBul.