EUVD-2025-2725

Malicious code in bioql PyPI...

CVE-2025-22325

Cross-Site Request Forgery CSRF vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a through = 1.3.5.2...

CVE-2025-22325

Cross-Site Request Forgery CSRF vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a through = 1.3.5.2...

CVE-2025-22325

CVE-2025-22325 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Autocompleter plugin by Nik Chankov that permits a Stored XSS. Public records indicate the flaw affects Autocompleter versions from unknown up to 1.3.5.2. The root cause, as stated, is CSRF enabling Stored XSS, but ...

CVE-2025-22325 WordPress Autocompleter plugin <= 1.3.5.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in nchankov Autocompleter autocompleter allows Stored XSS.This issue affects Autocompleter: from n/a through = 1.3.5.2...

PT-2025-4440 · Unknown · Nik Chankov Autocompleter

Name of the Vulnerable Software and Affected Versions: Nik Chankov Autocompleter versions 1.3.5.2 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on ...

WordPress plugin Autocompleter 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

WordPress Autocompleter plugin <= 1.3.5.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Autocompleter versions = 1.3.5.2...

PT-2024-13629 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: Silverstripe Framework versions prior to 4.13.39 and 5.1.11 Description: The issue allows a user to access a record's title even if they should not be able to see the record, by adding it to a GridField using the...