EUVD-2025-21598

Malicious code in bioql PyPI...

EUVD-2024-45584

Malicious code in bioql PyPI...

EUVD-2025-21603

Malicious code in bioql PyPI...

EUVD-2023-1448

Malicious code in bioql PyPI...

WordPress Etsy Shop plugin < 3.0.7 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Bob Matyas in WordPress Plugin Etsy Shop versions 3.0.7...

WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Upsell Order Bump Offer for WooCommerce versions = 3.0.7...

CVE-2025-59565

CVE-2025-59565 is a Stored XSS in the Upsell Order Bump Offer for WooCommerce WordPress plugin affecting versions up to 3.0.7. Root cause: improper input neutralization during web page generation. Impact: attacker-supplied script stored on vulnerable sites; Wordfence notes patch status as Patched...

CVE-2025-59565 WordPress Upsell Order Bump Offer for WooCommerce Plugin <= 3.0.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Swings Upsell Order Bump Offer for WooCommerce upsell-order-bump-offer-for-woocommerce allows Stored XSS.This issue affects Upsell Order Bump Offer for WooCommerce: from n/a through = 3.0.7...

WordPress plugin Etsy Shop 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress plugin Upsell Order Bump Offer for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based...

PT-2025-39041

Name of the Vulnerable Software and Affected Versions WP Swings Upsell Order Bump Offer for WooCommerce versions through 3.0.7 Description The software contains a flaw related to improper input handling during web page creation, leading to a potential Stored Cross-Site Scripting XSS issue. This...

@open-xchange/appsuite-codeceptjs (>=0.2.0, <=0.6.2), c-configure (>=1.0.1, <=2.1.5) +3 more potentially affected by CVE-2025-57285 via codeceptjs (>=3.0.7, <=3.6.10)

codeceptjs NPM version =3.0.7, =0.2.0, =1.0.1, =7.0.23, =1.0.4, =1.0.0, =1.0.4 Source cves: CVE-2025-57285 Source advisory: SNYK:JS-CODECEPTJS-12670804...

WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Anonymous in WordPress Plugin Advanced Ads – Tracking versions 3.0.7...

Linux Distros Unpatched Vulnerability : CVE-2025-25748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A CSRF vulnerability in the gestioneutenti.php endpoint of HotelDruid 3.0.7 allows attackers to perform unauthorized actions e.g., modifying user passwords on...

Linux Distros Unpatched Vulnerability : CVE-2019-5459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Integer underflow in VLC Media Player versions 3.0.7 leads to an out-of-band read. CVE-2019-5459 Note that Nessus relies on the presence of the package as...

CVE-2025-28959

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows SQL Injection.This issue affects URL Shortener: from n/a through = 3.0.7...

CVE-2025-24777

Deserialization of Untrusted Data vulnerability in awethemes Hillter allows Object Injection. This issue affects Hillter: from n/a through 3.0.7...

CVE-2025-28959

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows SQL Injection.This issue affects URL Shortener: from n/a through = 3.0.7...

CVE-2025-28959

CVE-2025-28959 affects the WordPress plugin URL Shortener (versions up to 3.0.7). The issue is an SQL Injection caused by improper neutralization of special SQL elements in the URL Shortener’s queries. CVSS 3.1 base metrics indicate high impact on confidentiality and a critical overall score (9.3...

WordPress plugin URL Shortener 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...