797 matches found
EUVD-2024-50052
Malicious code in bioql PyPI...
EUVD-2023-34902
Malicious code in bioql PyPI...
EUVD-2024-30390
Malicious code in bioql PyPI...
EUVD-2025-8525
Malicious code in bioql PyPI...
EUVD-2024-27079
Malicious code in bioql PyPI...
EUVD-2024-33906
Malicious code in bioql PyPI...
EUVD-2022-15450
Malicious code in bioql PyPI...
EUVD-2023-58470
Malicious code in bioql PyPI...
EUVD-2024-29137
Malicious code in bioql PyPI...
EUVD-2024-47654
Malicious code in bioql PyPI...
EUVD-2022-48674
Malicious code in bioql PyPI...
EUVD-2024-38146
Malicious code in bioql PyPI...
WordPress LearnPress Export Import plugin <= 4.0.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k in WordPress Plugin LearnPress Export Import versions = 4.0.9...
WordPress LearnPress Export Import plugin <= 4.1.2 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin LearnPress Export Import versions = 4.1.2...
VulnCheck KEV: CVE-2023-6567
The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 4.2.5.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
CVE-2025-24740
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in ThimPress LearnPress learnpress.This issue affects LearnPress: from n/a through = 4.2.7.1...
CVE-2024-1463
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Course, Lesson, and Quiz title and content in all versions up to, and including, 4.2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2024-3560
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id value in all versions up to, and including, 4.2.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-5483
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.6.8 due to incorrect implementation of getitemspermissionscheck function. This makes it possible for unauthenticated attackers to extract basic...
CVE-2024-4971
The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 4.2.6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...