689 matches found
EUVD-2025-16517
Malicious code in bioql PyPI...
EUVD-2022-1545
Malicious code in bioql PyPI...
EUVD-2025-10553
Malicious code in bioql PyPI...
EUVD-2025-11628
Malicious code in bioql PyPI...
CVE-2025-9080
The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...
CVE-2025-10192
The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppeeffect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...
CVE-2025-9080 Generic Elements <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Generic Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget fields in version 1.2.8 and earlier. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes it possible for authenticated attackers, with...
CVE-2025-9080
CVE-2025-9080 concerns the WordPress plugin Generic Elements. It describes a Stored Cross-Site Scripting (XSS) vulnerability in multiple widget fields caused by insufficient input sanitization and output escaping in versions <= 1.2.4. An attacker with at least contributor-level access can inje...
CVE-2025-10192
CVE-2025-10192 – WP Photo Effects (WordPress) is an authenticated Stored XSS vulnerability in the wppe_effect shortcode affecting all versions up to 1.2.4. The issue arises from insufficient input sanitization and output escaping on user-supplied shortcode attributes, allowing an attacker with co...
WordPress plugin WP Photo Effects 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...
PT-2025-40482
Name of the Vulnerable Software and Affected Versions Generic Elements plugin for WordPress versions prior to 1.2.4 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping of user-supplied attributes in multiple widget fields...
WordPress plugin Generic Elements 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-58681
Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Quotes: from n/a through = 1.2.4...
CVE-2025-58704
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ren Ventura WP Delete User Accounts wp-delete-user-accounts allows Stored XSS.This issue affects WP Delete User Accounts: from n/a through = 1.2.4...
CVE-2025-58681
Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Quotes: from n/a through = 1.2.4...
CVE-2025-58006
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Phishing.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through = 1.2.6...
WordPress WP Gravity Forms Keap/Infusionsoft plugin <= 1.2.6 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Bonds in WordPress Plugin WP Gravity Forms Keap/Infusionsoft versions = 1.2.6...
CVE-2025-58006
Technical details for CVE-2025-58006 are not provided in the supplied connected documents. No product/version/impact/fix data is present here; monitor for official advisories and updates.
CVE-2025-58681
CVE-2025-58681 involves a Missing Authorization vulnerability in the WordPress plugin Easy Quotes. Evidence from the CVE entry indicates affected software: Easy Quotes versions from n/a through 1.2.4, with an access-control misconfiguration allowing unauthorized actions due to incorrectly configu...
CVE-2025-58681 WordPress Easy Quotes Plugin <= 1.2.4 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Jürgen Müller Easy Quotes easy-quotes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Quotes: from n/a through = 1.2.4...