EUVD-2025-26027

Malicious code in bioql PyPI...

CVE-2025-48351

CVE-2025-48351 describes a CSRF to Stored XSS vulnerability in the WordPress plugin “Kento Splash Screen” affecting versions up to and including 1.4. The issue arises from cross-site request forgery that can lead to stored XSS payloads, with CVSS 3.1 base metrics indicating HIGH severity (7.1) an...

CVE-2025-48351: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in PluginsPoint Kento Splash Screen kento-splash-screen allows Stored XSS.This issue affects Kento Splash Screen: from n/a through = 1.4...

PT-2025-35020

Name of the Vulnerable Software and Affected Versions: Kento Splash Screen versions through 1.4 Description: A Cross-Site Request Forgery CSRF vulnerability exists in PluginsPoint Kento Splash Screen, allowing for Stored Cross-Site Scripting XSS. Recommendations: Update Kento Splash Screen to a...

CVE-2025-30559: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento WordPress Stats kento-wp-stats allows Stored XSS.This issue affects Kento WordPress Stats: from n/a through = 1.1...

CVE-2025-22518: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Justified Image Gallery justified-image-gallery allows Stored XSS.This issue affects Justified Image Gallery: from n/a through = 1.0...

CVE-2025-22584: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Timeline Pro timeline-pro allows DOM-Based XSS.This issue affects Timeline Pro: from n/a through = 1.3...

CVE-2024-51583: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PluginsPoint Kento Ads Rotator kento-ads-rotator allows Stored XSS.This issue affects Kento Ads Rotator: from n/a through = 1.3...