320 matches found
PT-2025-48568
Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.11.0-beta.1 Description The Grav admin plugin, an HTML user interface for configuring Grav and managing pages, contains a Reflected Cross-Site Scripting XSS issue. An attacker can inject malicious scripts through the...
CVE-2025-66308: Improper Neutralization of Input During Web Page Generation
This admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages. Prior to 1.11.0-beta.1, a Stored Cross-Site Scripting XSS vulnerability was identified in the /admin/config/site endpoint of the Grav application. This...
EUVD-2013-1502
Malware in sbrugna...
EUVD-2020-13793
Malware in sbrugna...
EUVD-2021-11493
Malware in sbrugna...
EUVD-2021-16063
Malware in sbrugna...
EUVD-2018-13508
Malware in sbrugna...
EUVD-2023-28058
Malicious code in bioql PyPI...
EUVD-2023-38145
Malicious code in bioql PyPI...
EUVD-2024-32303
Malicious code in bioql PyPI...
EUVD-2022-3913
Malicious code in bioql PyPI...
WordPress WP Frontend Admin plugin <= 1.22.7 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin WP Frontend Admin versions = 1.22.7...
CVE-2025-57898 WordPress WP Frontend Admin Plugin <= 1.22.6 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jose Vega WP Frontend Admin allows Stored XSS. This issue affects WP Frontend Admin: from n/a through 1.22.6...
CVE-2025-39553 WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 5.0.9...
CVE-2025-58865
CVE-2025-58865 is a CSRF vulnerability in the WordPress plugin Compact Admin affecting versions from and including some unknown earlier “n/a” up to 1.3.0 . The issue enables cross-site requests to be executed on behalf of an authenticated user, as described in multiple sources. CVSS base score is...
CVE-2025-58865 WordPress Compact Admin plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in reimund Compact Admin compact-admin allows Cross Site Request Forgery.This issue affects Compact Admin: from n/a through = 1.3.3...
WordPress Compact Admin plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Bao - BlueRock in WordPress Plugin Compact Admin versions = 1.3.3...
Linux Distros Unpatched Vulnerability : CVE-2020-4050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected versions of WordPress, misuse of the set-screen-option filter's return value allows arbitrary user meta fields to be saved. It does require an admin...