WordPress Password only login plugin <= 0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Password only login versions = 0.2...

EUVD-2015-9176

Malware in sbrugna...

EUVD-2017-11105

Malware in sbrugna...

EUVD-2017-17816

Malware in sbrugna...

EUVD-2015-9338

Malware in sbrugna...

EUVD-2022-52115

Malicious code in bioql PyPI...

EUVD-2022-7743

Malicious code in bioql PyPI...

EUVD-2025-27520

Malicious code in bioql PyPI...

EUVD-2023-31201

Malicious code in bioql PyPI...

EUVD-2025-22303

Malicious code in bioql PyPI...

EUVD-2023-38149

Malicious code in bioql PyPI...

EUVD-2023-31237

Malicious code in bioql PyPI...

EUVD-2022-40668

Malicious code in bioql PyPI...

EUVD-2023-29855

Malicious code in bioql PyPI...

EUVD-2022-6380

Malicious code in bioql PyPI...

EUVD-2022-5207

Malicious code in bioql PyPI...

EUVD-2025-4744

Malicious code in bioql PyPI...

EUVD-2025-15290

Malicious code in bioql PyPI...

EUVD-2023-41813

Malicious code in bioql PyPI...

CVE-2025-9857

The Heateor Login – Social Login Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'HeateorFacebookLogin' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This make...