CVE-2025-12824 Player Leaderboard 1.0.0 - 1.0.2 - Authenticated (Contributor+) Local File Inclusion

The Player Leaderboard plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0.2 via the 'playerleaderboard' shortcode. This is due to the plugin using an unsanitized user-supplied value from the shortcode's 'mode' attribute in a call to include withou...

CVE-2025-12824

The CVE-2025-12824 entry concerns the WordPress plugin Player Leaderboard (versions up to 1.0.2). It uses an unsanitized shortcode attribute from mode in a PHP include(), enabling Local File Inclusion and potentially arbitrary PHP code execution by authenticated users with Contributor-level acces...

WordPress plugin Player Leaderboard 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path traversal...

EUVD-2024-52546

Malicious code in bioql PyPI...

CVE-2024-54426

Cross-Site Request Forgery CSRF vulnerability in crossfitatgg LeaderBoard Plugin leaderboard-lite allows Stored XSS.This issue affects LeaderBoard Plugin: from n/a through = 1.2.4...

CVE-2024-54426

Cross-Site Request Forgery CSRF vulnerability in crossfitatgg LeaderBoard Plugin leaderboard-lite allows Stored XSS.This issue affects LeaderBoard Plugin: from n/a through = 1.2.4...

CVE-2024-54426

CVE-2024-54426 affects LeaderBoard Plugin for WordPress (

PT-2024-36315 · Unknown · Leaderboard Plugin

Name of the Vulnerable Software and Affected Versions: LeaderBoard Plugin versions 1.2.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

WordPress LeaderBoard Plugin plugin <= 1.2.4 - CSRF to Stored Cross-Site Scripting vulnerability

CSRF to Stored Cross-Site Scripting vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin LeaderBoard Plugin versions = 1.2.4...