CVE-2026-27436

The CVE covers WordPress plugin Five Star Business Profile and Schema (versions

PT-2026-54982

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

CVE-2026-27436: Improper Control of Generation of Code

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by daroo in WordPress Plugin Five Star Business Profile and Schema versions = 2.3.19...

CVE-2025-13007

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

CVE-2025-13007 WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) <= 3.20.3 - Unauthenticated Stored Cross-Site Scripting via External Content Import

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

CVE-2025-13007 WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets (Google Reviews, YouTube Feed, Photo Feeds, and More) <= 3.20.3 - Unauthenticated Stored Cross-Site Scripting via External Content Import

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

CVE-2025-13007: Improper Neutralization of Input During Web Page Generation

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

PT-2025-48647

The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.20.3 due to insufficient input sanitization and output escaping on externally-sourced content. This makes it possible...

EUVD-2021-11972

Malware in sbrugna...

EUVD-2023-46181

Malicious code in bioql PyPI...

EUVD-2025-8877

Malicious code in bioql PyPI...

CVE-2025-3060

Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile:...

CVE-2025-3060: Undefined Security Weakness

Vulnerability in Drupal Flattern – Multipurpose Bootstrap Business Profile.This issue affects Flattern – Multipurpose Bootstrap Business Profile:...

PT-2025-13860 · Unknown · Flattern – Multipurpose Bootstrap Business Profile

Name of the Vulnerable Software and Affected Versions: Flattern – Multipurpose Bootstrap Business Profile affected versions not specified Description: The issue affects Flattern – Multipurpose Bootstrap Business Profile. No specific details about the nature of the issue or its potential impact ar...

Drupal Flattern – Multipurpose Bootstrap Business Profile module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drupal Security Site in WordPress Module Flattern – Multipurpose Bootstrap Business Profile versions...

CVE-2023-41689

The CVE-2023-41689 entry maps to the WordPress plugin “Post to Google My Business (Google Business Profile)” where versions

CVE-2023-41689: Missing Authorization

Missing Authorization vulnerability in Koen Reus Post to Google My Business Google Business Profile allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post to Google My Business Google Business Profile: from n/a through 3.1.14...

WordPress Post to Google My Business (Google Business Profile) Plugin <= 3.1.14 is vulnerable to Broken Access Control

Software Post to Google My Business Google Business Profile Type Plugin Vulnerable versions = 3.1.14 Fixed in 3.1.15 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-41689 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 3e429cdbca73...

WordPress Business Profile Reviews Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Business Profile Reviews Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b0e3678a0ced Credits Rafie Muhammad Patchstack...