EUVD-2025-26027

Malicious code in bioql PyPI...

CVE-2025-48351

CVE-2025-48351 describes a CSRF to Stored XSS vulnerability in the WordPress plugin “Kento Splash Screen” affecting versions up to and including 1.4. The issue arises from cross-site request forgery that can lead to stored XSS payloads, with CVSS 3.1 base metrics indicating HIGH severity (7.1) an...

PT-2025-35020

Name of the Vulnerable Software and Affected Versions: Kento Splash Screen versions through 1.4 Description: A Cross-Site Request Forgery CSRF vulnerability exists in PluginsPoint Kento Splash Screen, allowing for Stored Cross-Site Scripting XSS. Recommendations: Update Kento Splash Screen to a...