18 matches found
EUVD-2024-31358
Malicious code in bioql PyPI...
EUVD-2025-17224
Malicious code in bioql PyPI...
CVE-2025-30968
Cross-Site Request Forgery CSRF vulnerability in jokerbr313 Advanced Post List advanced-post-list allows Cross Site Request Forgery.This issue affects Advanced Post List: from n/a through = 0.5.6.2...
CVE-2025-30968
Cross-Site Request Forgery CSRF vulnerability in jokerbr313 Advanced Post List advanced-post-list allows Cross Site Request Forgery.This issue affects Advanced Post List: from n/a through = 0.5.6.2...
CVE-2025-30968
Cross-Site Request Forgery CSRF vulnerability in jokerbr313 Advanced Post List advanced-post-list allows Cross Site Request Forgery.This issue affects Advanced Post List: from n/a through = 0.5.6.2...
CVE-2025-30968 WordPress Advanced Post List plugin <= 0.5.6.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in jokerbr313 Advanced Post List advanced-post-list allows Cross Site Request Forgery.This issue affects Advanced Post List: from n/a through = 0.5.6.2...
CVE-2025-30968 WordPress Advanced Post List plugin <= 0.5.6.2 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in jokerbr313 Advanced Post List advanced-post-list allows Cross Site Request Forgery.This issue affects Advanced Post List: from n/a through = 0.5.6.2...
CVE-2025-30968
CVE-2025-30968 describes a Cross-Site Request Forgery (CSRF) affecting the WordPress plugin Advanced Post List . Connected sources indicate the issue affects versions from an unspecified baseline up to 0.5.6.2. The Red Hat entry reiterates the CSRF nature of the vulnerability in the same componen...
WordPress plugin Advanced Post List 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...
PT-2025-24180 · Unknown · Advanced Post List
Name of the Vulnerable Software and Affected Versions: Advanced Post List versions 0.5.6.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Advanced Post List...
CVE-2024-33642
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EkoJR Advanced Post List allows Stored XSS.This issue affects Advanced Post List: from n/a through 0.5.6.1...
CVE-2024-33642
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EkoJR Advanced Post List allows Stored XSS.This issue affects Advanced Post List: from n/a through 0.5.6.1...
CVE-2024-33642
CVE-2024-33642 denotes an stored XSS in the WordPress plugin “Advanced Post List” due to improper input neutralization during web page generation. Affected range: from n/a up to 0.5.6.1. The CVSS 3.1 base score is 5.9 (Medium) with impact on confidentiality, integrity, and availability (C/L/I/A)....
CVE-2024-33642 WordPress Advanced Post List plugin <= 0.5.6.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EkoJR Advanced Post List allows Stored XSS.This issue affects Advanced Post List: from n/a through 0.5.6.1...
CVE-2024-33642 WordPress Advanced Post List plugin <= 0.5.6.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in EkoJR Advanced Post List allows Stored XSS.This issue affects Advanced Post List: from n/a through 0.5.6.1...
WordPress plugin Advanced Post List 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...
WordPress Advanced Post List plugin <= 0.5.6.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by emad Patchstack Alliance in WordPress Plugin Advanced Post List versions = 0.5.6.1...
WordPress Advanced Post List Plugin <= 0.5.6.1 is vulnerable to Cross Site Scripting (XSS)
Software Advanced Post List Type Plugin Vulnerable versions = 0.5.6.1 Fixed in 0.5.6.2 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-33642 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 93b608a88e7f Credits emad Required privilege...