543 matches found
CVE-2025-13642 ProfilePress <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.7 due to insufficient input sanitization on the type parameter i...
CVE-2025-13642
CVE-2025-13642 concerns ProfilePress (Paid Membership Plugin for WordPress). The vulnerability arises from insufficient input sanitization on the type parameter in the form preview endpoint pp_preview_form, allowing an authenticated user with at least Subscriber privileges to execute arbitrary sh...
WordPress ProfilePress plugin <= 4.16.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution vulnerability
Authenticated Subscriber+ Arbitrary Shortcode Execution vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin ProfilePress versions = 4.16.7...
CVE-2025-13642: Improper Control of Generation of Code
The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.7 due to insufficient input sanitization on the type parameter i...
PT-2025-49979
Name of the Vulnerable Software and Affected Versions ProfilePress versions through 4.16.7 Description The ProfilePress plugin for WordPress is susceptible to arbitrary shortcode execution due to inadequate input sanitization of the type parameter within the form preview functionality. This allow...
WordPress plugin: Paid Membership Plugin, E-commerce, User Registration Form, Login Form, User Profile & Content Restriction – ProfilePress has a code injection vulnerability.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. WordPress plugin Paid...
EUVD-2021-21273
Malware in sbrugna...
EUVD-2023-46413
Malicious code in bioql PyPI...
EUVD-2022-50206
Malicious code in bioql PyPI...
EUVD-2023-46412
Malicious code in bioql PyPI...
EUVD-2025-28807
Malicious code in bioql PyPI...
EUVD-2023-28060
Malicious code in bioql PyPI...
EUVD-2023-27906
Malicious code in bioql PyPI...
EUVD-2023-48509
Malicious code in bioql PyPI...
EUVD-2023-55615
Malicious code in bioql PyPI...
EUVD-2023-27916
Malicious code in bioql PyPI...
EUVD-2022-48004
Malicious code in bioql PyPI...
EUVD-2024-31802
Malicious code in bioql PyPI...