CVE-2025-27322

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

WordPress Vasaio QR Code plugin <= 1.2.5 - CSRF to XSS vulnerability

CSRF to XSS vulnerability discovered by johska in WordPress Plugin Vasaio QR Code versions = 1.2.5...

CVE-2025-46504

Cross-Site Request Forgery CSRF vulnerability in Olar Marius Vasaio QR Code vasaio-qr-code allows Stored XSS.This issue affects Vasaio QR Code: from n/a through = 1.2.5...

CVE-2025-46504

CVE-2025-46504 concerns the WordPress plugin Vasaio QR Code (versions up to 1.2.5). The vulnerability is a CSRF-to-stored XSS issue, as reported by Patchstack and reflected in multiple feeds. Affected component is the Vasaio QR Code plugin itself; root cause is CSRF enabling stored XSS payload ex...

CVE-2025-46504 WordPress Vasaio QR Code plugin <= 1.2.5 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Olar Marius Vasaio QR Code vasaio-qr-code allows Stored XSS.This issue affects Vasaio QR Code: from n/a through = 1.2.5...

WordPress plugin Vasaio QR Code 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-17810 · Unknown · Vasaio Qr Code

Name of the Vulnerable Software and Affected Versions: Vasaio QR Code versions 1.2.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and...

Macro-Video V380 安全漏洞

Macro-Video V380 is an IP camera from Macro-Video. A security vulnerability exists in Macro-Video V380 version 2.1.44 and version 2.1.64, which stems from a QR code sharing component that could lead to the disclosure of sensitive information...

CVE-2025-25983

An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro android application 2.1.64 allows an attacker to obtain sensitive information via the QE code based sharing component...

CVE-2025-27322

CVE-2025-27322 — Reflected Cross-Site Scripting in WordPress plugin “QR Code for WooCommerce” (Bappa Mal) up to version 1.2.0. Root cause: improper input neutralization during web page generation. Affected: QR Code for WooCommerce

CVE-2025-27322 WordPress QR Code for WooCommerce Plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bappa Mal QR Code for WooCommerce wc-qr-codes allows Reflected XSS.This issue affects QR Code for WooCommerce: from n/a through = 1.2.0...

PT-2025-17069 · Woocommerce · Bappa Mal Qr Code For Woocommerce

Name of the Vulnerable Software and Affected Versions: Bappa Mal QR Code for WooCommerce versions 1.2.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...

WordPress plugin QR Code for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems

QuickResponseC2 is a stealthy Command and Control C2 framework that enables indirect and covert communication between the attacker and victim machines via an intermediate HTTP/S server. All network activity is limited to uploading and downloading images, making it an fully undetectable by IPS/IDS...

CVE-2025-32116

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Studi7 QR Master qr-master allows Reflected XSS.This issue affects QR Master: from n/a through = 1.0.5...

CVE-2025-32116

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Studi7 QR Master qr-master allows Reflected XSS.This issue affects QR Master: from n/a through = 1.0.5...

CVE-2025-32116 WordPress QR Master plugin <= 1.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Studi7 QR Master qr-master allows Reflected XSS.This issue affects QR Master: from n/a through = 1.0.5...

CVE-2025-32116

CVE-2025-32116 is a reflected XSS vulnerability in the WordPress plugin QR Master. The connected Wordfence WordPress vulnerability report lists QR Master (affected through version 1.0.5) with the issue described as improper neutralization of input during web page generation, enabling reflected cr...

WordPress plugin QR Master 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

Moodle 4.2.x < 4.2.8 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 4.1.11, 4.2.x prior to 4.2.8, or 4.3.x prior to 4.3.5 or 4.4.x prior to 4.4.1. It is, therefore, affected by multiple vulnerabilities. - A unique key should be generated for a user's QR login key and...