173 matches found
EUVD-2026-62209
Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...
CVE-2026-66602
Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...
CVE-2026-66602: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in DevItems HashBar – WordPress Notification Bar allows Cross Site Request Forgery. This issue affects HashBar – WordPress Notification Bar: from n/a through 2.0.0...
PT-2026-78248
Name of the Vulnerable Software and Affected Versions HashBar – WordPress Notification Bar versions prior to 2.0.1 Description Cross-Site Request Forgery CSRF in DevItems HashBar – WordPress Notification Bar allows an attacker to induce a user to perform actions they did not intend to do. CSRF is...
CVE-2025-15380: Improper Neutralization of Input During Web Page Generation
The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'nx-preview' POST parameter in all versions up to, and including, 3.2.0. Thi...
CVE-2025-9895
The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...
WordPress Notification Bar plugin <= 2.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Notification Bar versions = 2.2...
EUVD-2024-36755
Malicious code in bioql PyPI...
EUVD-2024-31639
Malicious code in bioql PyPI...
EUVD-2025-32253
Malicious code in bioql PyPI...
EUVD-2025-8781
Malicious code in bioql PyPI...
EUVD-2025-2896
Malicious code in bioql PyPI...
EUVD-2023-56093
Malicious code in bioql PyPI...
EUVD-2024-16418
Malicious code in bioql PyPI...
EUVD-2024-26813
Malicious code in bioql PyPI...
EUVD-2022-3324
Malicious code in bioql PyPI...
EUVD-2024-35407
Malicious code in bioql PyPI...
CVE-2025-9895
The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...
CVE-2025-9895 Notification Bar <= 2.2 - Cross-Site Request Forgery
The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...