EUVD-2025-205193

Cross-Site Request Forgery CSRF vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Cross Site Request Forgery.This issue affects WP Email Capture: from n/a through = 3.12.5...

CVE-2025-67557

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhys Wynne WP eBay Product Feeds ebay-feeds-for-wordpress allows Stored XSS.This issue affects WP eBay Product Feeds: from n/a through = 3.4.9...

EUVD-2025-27391

Malicious code in bioql PyPI...

CVE-2025-39540

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rhys Wynne WP Flipclock wp-flipclock allows DOM-Based XSS.This issue affects WP Flipclock: from n/a through = 1.9.1...

CVE-2025-39540

CVE-2025-39540 refers to a Cross-Site Scripting (DOM-based) vulnerability in the WordPress plugin WP Flipclock. Public records specify the issue affects WP Flipclock versions up to 1.9.x (1.9.1 cited in patches) and is caused by improper input neutralization during web page generation. Exploitati...