409 matches found
EUVD-2024-32078
Malicious code in bioql PyPI...
EUVD-2025-18546
Malicious code in bioql PyPI...
EUVD-2022-24534
Malicious code in bioql PyPI...
CVE-2025-58265
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager - OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager - OpenStreetMaps: from n/a through = 4.2.1...
CVE-2025-57987
Missing Authorization vulnerability in ThimPress WP Events Manager wp-events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Events Manager: from n/a through = 2.2.1...
CVE-2025-58265
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager – OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager – OpenStreetMaps: from n/a through = 4.2.1...
CVE-2025-57987
Missing Authorization vulnerability in ThimPress WP Events Manager wp-events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Events Manager: from n/a through = 2.2.1...
WordPress WP Events Manager Plugin <= 2.2.1 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin WP Events Manager versions = 2.2.1...
WordPress Events Manager – OpenStreetMaps Plugin <= 4.2.1 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by theviper17 in WordPress Plugin Events Manager OpenStreetMaps versions = 4.2.1...
CVE-2025-57987 WordPress WP Events Manager Plugin <= 2.2.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in ThimPress WP Events Manager wp-events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Events Manager: from n/a through = 2.2.1...
CVE-2025-57987
CVE-2025-57987 is a Missing Authorization vulnerability affecting WP Events Manager (WordPress plugin) <= 2.2.1. The issue, described in the Initial Document as incorrect access control, indicates unauthorized access could be gained due to misconfigured security levels in the plugin’s access c...
CVE-2025-57987 WordPress WP Events Manager Plugin <= 2.2.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in ThimPress WP Events Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Events Manager: from n/a through 2.2.1...
CVE-2025-58265
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager – OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager – OpenStreetMaps: from n/a through = 4.2.1...
CVE-2025-58265 WordPress Events Manager – OpenStreetMaps Plugin <= 4.2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager – OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager – OpenStreetMaps: from n/a through = 4.2.1...
CVE-2025-58265 WordPress Events Manager – OpenStreetMaps Plugin <= 4.2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager – OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager – OpenStreetMaps: from n/a through = 4.2.1...
CVE-2025-58265
CVE-2025-58265 : Stored XSS in WordPress plugin “Events Manager – OpenStreetMaps” (Stonehenge Creations). Affected: Events Manager – OpenStreetMaps, version range up to 4.2.1. Root cause: improper input neutralization during web page generation, enabling authenticated users to inject scripts that...
PT-2025-38928
Name of the Vulnerable Software and Affected Versions Events Manager – OpenStreetMaps versions through 4.2.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts...
WordPress plugin WP Events Manager 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
WordPress plugin Events Manager – OpenStreetMaps 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. WordPress plugin Events...
PT-2025-38837
Name of the Vulnerable Software and Affected Versions WP Events Manager versions through 2.2.1 Description A missing authorization issue exists in ThimPress WP Events Manager. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access...