712 matches found
PT-2025-42693
Name of the Vulnerable Software and Affected Versions GSpeech TTS – WordPress Text To Speech Plugin versions through 3.17.13 Description The GSpeech TTS – WordPress Text To Speech Plugin is susceptible to SQL Injection due to inadequate input sanitization and query preparation. This allows...
PT-2025-42304
Name of the Vulnerable Software and Affected Versions Wp tabber widget plugin for WordPress versions prior to 4.1 Description The Wp tabber widget plugin for WordPress is susceptible to SQL Injection through the 'wp-tabber-widget' shortcode. Insufficient escaping of user-supplied parameters and...
PT-2025-42309
Name of the Vulnerable Software and Affected Versions WP Google Map Plugin versions prior to 1.0 Description The WP Google Map Plugin for WordPress is susceptible to a blind SQL Injection issue. This is due to inadequate escaping of user-supplied input and insufficient preparation of existing SQL...
PT-2025-42300
Name of the Vulnerable Software and Affected Versions WP jQuery Pager plugin versions through 1.4.0 Description The WP jQuery Pager plugin for WordPress is susceptible to SQL Injection through the 'ids' shortcode attribute parameter. This is due to inadequate escaping of user-supplied input and...
CVE-2025-10682: Improper Neutralization of Special Elements used in an SQL Command
The TARIFFUXX plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4. This is due to insufficient neutralization of user-supplied input used directly in SQL queries. This makes it possible for authenticated attackers, with Contributor-level access and above, to...
CVE-2025-11501: Improper Neutralization of Special Elements used in an SQL Command
The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'taxquery' parameter in all versions up to, and including, 1.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
PT-2025-42296
Name of the Vulnerable Software and Affected Versions Rich Snippet Site Report plugin for WordPress versions prior to 2.0.0106 Description The Rich Snippet Site Report plugin for WordPress is susceptible to SQL Injection due to inadequate input sanitization and SQL query preparation. Specifically...
PT-2025-42305
Name of the Vulnerable Software and Affected Versions WordPress Outdoor plugin versions prior to 1.3.3 Description The Outdoor plugin for WordPress is susceptible to SQL Injection through the 'edit' action. This is due to inadequate escaping of user-supplied input and insufficient preparation of...
CVE-2025-10862: Improper Neutralization of Special Elements used in an SQL Command
The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.1.3. This is due to insufficient escaping on the 'id' parameter and lack of sufficient preparation on...
EUVD-2018-17781
Malware in sbrugna...
EUVD-2018-7486
Malware in sbrugna...
EUVD-2019-19360
Malware in sbrugna...
EUVD-2019-6582
Malware in sbrugna...
EUVD-2018-17780
Malware in sbrugna...
EUVD-2019-19366
Malware in sbrugna...
EUVD-2021-13906
Malware in sbrugna...
EUVD-2019-7083
Malware in sbrugna...
EUVD-2017-14698
Malware in sbrugna...