450 matches found
CVE-2025-14042: Improper Neutralization of Input During Web Page Generation
The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio Items in all versions up to, and including, 13.4.1. This is due to insufficient input sanitization and output escaping on...
CVE-2026-3512: Improper Neutralization of Input During Web Page Generation
The Writeprint Stylometry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p' GET parameter in all versions up to and including 0.1. This is due to insufficient input sanitization and output escaping in the bjlwprintstylocommentsnav function. The function directly...
CVE-2023-4779
The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's uspgallery shortcode in versions up to, and including, 20230811 due to insufficient input sanitization and output escaping on user supplied attributes like 'before'. This makes it possible...
CVE-2025-1690
The ThemeMakers Stripe Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stripe' shortcode in versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-2474
The Standout Color Boxes and Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'color-button' shortcode in all versions up to, and including, 0.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possib...
CVE-2024-2121
The Elementor Website Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Media Carousel widget in all versions up to, and including, 3.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...
CVE-2025-10748: Improper Neutralization of Special Elements used in an SQL Command
The RapidResult plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, and including, 1.2. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
EUVD-2023-57655
Malicious code in bioql PyPI...
EUVD-2024-44103
Malicious code in bioql PyPI...
EUVD-2024-33087
Malicious code in bioql PyPI...
EUVD-2023-57931
Malicious code in bioql PyPI...
EUVD-2023-58100
Malicious code in bioql PyPI...
EUVD-2023-58030
Malicious code in bioql PyPI...
EUVD-2023-54780
Malicious code in bioql PyPI...
EUVD-2024-44099
Malicious code in bioql PyPI...
EUVD-2023-57879
Malicious code in bioql PyPI...
EUVD-2023-57958
Malicious code in bioql PyPI...
EUVD-2024-16015
Malicious code in bioql PyPI...