273 matches found
EUVD-2023-51948
Malicious code in bioql PyPI...
EUVD-2022-15518
Malicious code in bioql PyPI...
CVE-2025-54667
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-54668
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-54667
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-54668
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-54668 WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-54668 WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saad Iqbal myCred mycred allows Stored XSS.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-54668
CVE-2025-54668: Stored XSS in WordPress plugin myCred up to version 2.9.4.3 due to improper input neutralization during web page generation. Affected software: myCred (WordPress plugin). Impact is stated as Stored Cross-Site Scripting with low to moderate severity (CVSS v3.1 base score 6.5). Reme...
CVE-2025-54667 WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...
CVE-2025-54667
CVE-2025-54667 describes a TOCTOU race condition in WordPress plugin myCred up to version 2.9.4.3. The vulnerability (CVSSv3.1: 5.3, Network/Low/No user interaction) affects myCred and can enable a race condition exploit related to TOCTOU in the plugin. Remediation per connected sources is to upd...
CVE-2025-54667 WordPress myCred Plugin plugin <= 2.9.4.3 - Race Condition Vulnerability
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects myCred: from n/a through 2.9.4.3...
PT-2025-33222 · WordPress · Mycred
Name of the Vulnerable Software and Affected Versions: myCred versions through 2.9.4.3 Description: The software contains an improper neutralization of input during web page generation, leading to a stored cross-site scripting issue. Recommendations: Update myCred to a version later than 2.9.4.3...
PT-2025-33221 · Mycred · Mycred
Name of the Vulnerable Software and Affected Versions: myCred versions through 2.9.4.3 Description: A Time-of-check Time-of-use TOCTOU race condition exists in myCred. This issue allows leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. Recommendations: Update myCred to a version...
WordPress plugin myCred 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress plugin myCred 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...
WordPress myCred plugin <= 2.9.4.3 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Peter Thaleikis in WordPress Plugin myCred versions = 2.9.4.3...
WordPress myCred plugin <= 2.9.4.3 - Race Condition Vulnerability
Race Condition Vulnerability discovered by Esteban Montes Morales in WordPress Plugin myCred versions = 2.9.4.3...
CVE-2025-49872
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects myCred: from n/a through = 2.9.4.2...
CVE-2025-49857
Missing Authorization vulnerability in Saad Iqbal myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects myCred: from n/a through = 2.9.4.2...