28885 matches found
CVE-2025-10383
The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...
CVE-2025-8726 WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
FreeBSD : redis,valkey -- Out of bound read due to a bug in LUA (0af2f18e-a119-11f0-9446-f02f7497ecda)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0af2f18e-a119-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted LUA script to read out-of-bound data o...
PT-2025-40619
Name of the Vulnerable Software and Affected Versions Majestic Before After Image plugin for WordPress versions prior to 2.0.2 Description The software is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows authenticated attackers with...
FreeBSD : redis,valkey -- Running Lua function as a different user (0258d37d-a118-11f0-9446-f02f7497ecda)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0258d37d-a118-11f0-9446-f02f7497ecda advisory. redis reports: An authenticated user may use a specially crafted Lua script to manipulate different LUA...
WordPress Flexi plugin <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via flexi-form-tag Shortcode vulnerability discovered by Peter Thaleikis in WordPress Plugin Flexi – Guest Submit versions = 4.28...
EUVD-2022-3296
Malicious code in bioql PyPI...
EUVD-2021-7912
Malicious code in bioql PyPI...
EUVD-2025-28018
Malicious code in bioql PyPI...
EUVD-2025-23931
Malicious code in bioql PyPI...
EUVD-2022-29674
Malicious code in bioql PyPI...
EUVD-2022-2401
Malicious code in bioql PyPI...
EUVD-2023-34052
Malicious code in bioql PyPI...
EUVD-2024-52192
Malicious code in bioql PyPI...
EUVD-2025-24214
Malicious code in bioql PyPI...
EUVD-2022-33776
Malicious code in bioql PyPI...
EUVD-2022-5001
Malicious code in bioql PyPI...
EUVD-2022-50636
Malicious code in bioql PyPI...