93 matches found
WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting
WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...
WordPress Anti-Spam Protection – No API Key, GDPR Friendly plugin <= 2.3.7 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin Anti-Spam by Fullworks : GDPR Compliant Spam Protection versions = 2.3.7...
EUVD-2026-20189
Missing Authorization vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display Eventbrite Events: from n/a through = 6.5.6...
CVE-2023-25713
Unauth. Stored Cross-Site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...
CVE-2023-25714
Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quick Paypal Payments: from n/a through 5.7.25...
EUVD-2022-49644
Malicious code in bioql PyPI...
EUVD-2023-28043
Malicious code in bioql PyPI...
EUVD-2023-27968
Malicious code in bioql PyPI...
EUVD-2023-28039
Malicious code in bioql PyPI...
EUVD-2023-29623
Malicious code in bioql PyPI...
EUVD-2025-27017
Malicious code in bioql PyPI...
EUVD-2023-29624
Malicious code in bioql PyPI...
EUVD-2023-29014
Malicious code in bioql PyPI...
EUVD-2023-27972
Malicious code in bioql PyPI...
EUVD-2023-29612
Malicious code in bioql PyPI...
EUVD-2022-39973
Malicious code in bioql PyPI...
EUVD-2022-50368
Malicious code in bioql PyPI...
EUVD-2023-28038
Malicious code in bioql PyPI...
PT-2025-36252
Name of the Vulnerable Software and Affected Versions: fullworks Quick Paypal Payments versions through 5.7.46 Description: The software contains a Cross-Site Request Forgery CSRF flaw. This issue allows attackers to perform actions on behalf of authenticated users. Recommendations: fullworks Qui...
CVE-2023-25702
Auth. admin+ Stored Cross-site Scripting XSS vulnerability in Fullworks Quick Paypal Payments plugin = 5.7.25 versions...