186 matches found
CVE-2023-50901
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows Reflected XSS.This issue affects HT Mega – Absolute Addons For Elementor: from n/a through 2.3.8...
CVE-2025-68533
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WC Builder wc-builder allows Stored XSS.This issue affects WC Builder: from n/a through = 1.2.0...
EUVD-2025-205190
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WC Builder wc-builder allows Stored XSS.This issue affects WC Builder: from n/a through = 1.2.0...
CVE-2025-68533
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WC Builder wc-builder allows Stored XSS.This issue affects WC Builder: from n/a through = 1.2.0...
CVE-2025-68533
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WC Builder wc-builder allows Stored XSS.This issue affects WC Builder: from n/a through = 1.2.0...
CVE-2025-68533 WordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WC Builder wc-builder allows Stored XSS.This issue affects WC Builder: from n/a through = 1.2.0...
CVE-2025-68533
CVE-2025-68533 affects WC Builder – WooCommerce Page Builder for WPBakery (WordPress). The Wordfence Vulnerability report lists it under Vulnerable Software: WC Builder, ≤1.2.0, with a Stored Cross-Site Scripting vulnerability. The linked entry in the CVE details also identifies this as a Stored ...
PT-2025-53097
Name of the Vulnerable Software and Affected Versions HasThemes WC Builder versions through 1.2.0 Description A flaw exists in HasThemes WC Builder that allows for Stored Cross-Site Scripting XSS. This occurs due to improper neutralization of input during web page generation. The issue allows an...
CVE-2025-68533: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in HasThemes WC Builder wc-builder allows Stored XSS.This issue affects WC Builder: from n/a through = 1.2.0...
CVE-2025-64271
Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...
EUVD-2025-163777
Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...
CVE-2025-64271
Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...
CVE-2025-64271
Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...
CVE-2025-64271
CVE-2025-64271 describes a Cross-Site Request Forgery (CSRF) vulnerability in HasThemes WP Plugin Manager (wp-plugin-manager) affecting version range up to and including 1.4.7. The issue arises from insufficient validation of requests from trusted users, enabling authenticated actions to be spoof...
CVE-2025-64271 WordPress WP Plugin Manager plugin <= 1.4.7 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in HasThemes WP Plugin Manager wp-plugin-manager allows Cross Site Request Forgery.This issue affects WP Plugin Manager: from n/a through = 1.4.7...
PT-2025-46804
Name of the Vulnerable Software and Affected Versions HasThemes WP Plugin Manager versions through 1.4.7 Description The software is susceptible to a Cross-Site Request Forgery CSRF issue. This allows an attacker to potentially perform actions on behalf of an authenticated user without their...
EUVD-2023-56093
Malicious code in bioql PyPI...
EUVD-2023-27889
Malicious code in bioql PyPI...