EUVD-2021-25703

Malware in sbrugna...

EUVD-2025-13730

Malicious code in bioql PyPI...

EUVD-2025-11692

Malicious code in bioql PyPI...

CVE-2025-47674

Cross-Site Request Forgery CSRF vulnerability in Credova Financial CredovaFinancial credova-financial allows Cross Site Request Forgery.This issue affects CredovaFinancial: from n/a through = 2.5.0...

WordPress Credova_Financial plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by astra.r3verii in WordPress Plugin CredovaFinancial versions = 2.5.0...

CVE-2025-47674

Cross-Site Request Forgery CSRF vulnerability in Credova Financial CredovaFinancial credova-financial allows Cross Site Request Forgery.This issue affects CredovaFinancial: from n/a through = 2.5.0...

CVE-2025-47674 WordPress Credova_Financial <= 2.5.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Credova Financial CredovaFinancial allows Cross Site Request Forgery. This issue affects CredovaFinancial: from n/a through 2.5.0...

CVE-2025-47674 WordPress Credova_Financial plugin <= 2.5.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Credova Financial CredovaFinancial credova-financial allows Cross Site Request Forgery.This issue affects CredovaFinancial: from n/a through = 2.5.0...

CVE-2025-47674

CVE-2025-47674 refers to a CSRF vulnerability in the WordPress plugin Credova_Financial. Public details in the initial record indicate affected software: Credova_Financial versions n/a through 2.5.0, with a CVSS v3.1 base score of 4.3 (Medium) and impact on integrity. The connected documentation ...

WordPress plugin Credova_Financial 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2025-20219 · Unknown · Credova Financial

Name of the Vulnerable Software and Affected Versions: Credova Financial versions n/a through 2.5.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For versions n/a through 2.5.0, update to a version that include...

CVE-2025-32588

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Credova Financial CredovaFinancial credova-financial allows Reflected XSS.This issue affects CredovaFinancial: from n/a through = 2.4.8...

CVE-2025-32588

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Credova Financial CredovaFinancial credova-financial allows Reflected XSS.This issue affects CredovaFinancial: from n/a through = 2.4.8...

CVE-2025-32588 WordPress Credova_Financial plugin <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Credova Financial CredovaFinancial credova-financial allows Reflected XSS.This issue affects CredovaFinancial: from n/a through = 2.4.8...

CVE-2025-32588 WordPress Credova_Financial plugin <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Credova Financial CredovaFinancial allows Reflected XSS. This issue affects CredovaFinancial: from n/a through 2.4.8...

CVE-2025-32588

CVE-2025-32588 is a reflected XSS in the WordPress Credova_Financial plugin (affected:

WordPress plugin Credova_Financial 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-17126 · Unknown · Credova Financial

Name of the Vulnerable Software and Affected Versions: Credova Financial versions through 2.4.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions through 2.4.8...

WordPress Credova_Financial plugin <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin CredovaFinancial versions = 2.4.8...

CVE-2021-39342 Credova_Financial <= 1.4.8 Sensitive Information Disclosure

The CredovaFinancial WordPress plugin discloses a site's associated Credova API account username and password in plaintext via an AJAX action whenever a site user goes to checkout on a page that has the Credova Financing option enabled. This affects versions up to, and including, 1.4.8...