2696 matches found
CVE-2025-12077: Improper Neutralization of Input During Web Page Generation
The WP to LinkedIn Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage in all versions up to, and including, 1.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-12076: Improper Neutralization of Input During Web Page Generation
The Social Media Auto Publish plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PostMessage parameter in all versions up to, and including, 3.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2025-13622: Improper Neutralization of Input During Web Page Generation
The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATHINFO in all versions up to, and including, 0.99-RC2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrar...
CVE-2025-60646: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...
CVE-2025-12471: Improper Neutralization of Input During Web Page Generation
The Hubbub Lite – Fast, free social sharing and follow buttons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dpsplistattentionsearch' parameter in all versions up to, and including, 1.36.0 due to insufficient input sanitization and output escaping. This makes it...
CVE-2025-12017: Improper Neutralization of Input During Web Page Generation
The VNPAY Payment gateway plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...
CVE-2020-36853: Improper Neutralization of Input During Web Page Generation
The 10WebMapBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Plugin Settings Change in versions up to, and including, 1.0.63 due to insufficient input sanitization and output escaping and a lack of capability checks. This makes it possible for unauthenticated attacker...
EUVD-2021-21305
Malware in sbrugna...
EUVD-2020-11196
Malware in sbrugna...
EUVD-2020-23987
Malware in sbrugna...
EUVD-2021-24806
Malware in sbrugna...
EUVD-2020-18079
Malware in sbrugna...
EUVD-2021-17135
Malware in sbrugna...
EUVD-2021-21295
Malware in sbrugna...
EUVD-2021-25686
Malware in sbrugna...
EUVD-2021-21317
Malware in sbrugna...
EUVD-2021-24791
Malware in sbrugna...
EUVD-2020-21527
Malware in sbrugna...