208 matches found
EUVD-2021-11148
Malware in sbrugna...
EUVD-2024-31825
Malicious code in bioql PyPI...
EUVD-2025-18481
Malicious code in bioql PyPI...
EUVD-2022-6375
Malicious code in bioql PyPI...
EUVD-2023-36835
Malicious code in bioql PyPI...
EUVD-2023-1308
Malicious code in bioql PyPI...
EUVD-2023-36838
Malicious code in bioql PyPI...
EUVD-2021-34200
Malicious code in bioql PyPI...
WordPress Ivory Search plugin <= 5.5.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Ivory Search versions = 5.5.12...
CVE-2025-57893
Cross-Site Request Forgery CSRF vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Request Forgery.This issue affects WP Fast Total Search: from n/a through = 1.79.270...
PT-2025-34357 · WordPress · Wp Fast Total Search
Name of the Vulnerable Software and Affected Versions: WP Fast Total Search versions through 1.79.270 Description: The plugin suffers from a Cross-Site Request Forgery CSRF issue, allowing attackers to potentially perform actions on behalf of authenticated users. Recommendations: Versions prior t...
WordPress Ivory Search plugin < 5.5.10 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by WPscan in WordPress Plugin Ivory Search versions 5.5.10...
CVE-2025-5209 Ivory Search < 5.5.10 - Admin+ Stored XSS
The Ivory Search WordPress plugin before 5.5.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2024-3233
The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcreateindex function in all versions up to, and including, 5.5.5. This makes it possible for authenticated attackers, with subscriber-lev...
CVE-2023-30876
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Dave Ross Dave's WordPress Live Search plugin = 4.8.1 versions...
CVE-2023-32592
Cross-Site Request Forgery CSRF vulnerability in Palasthotel by Edward Bock, Katharina Rompf Sunny Search plugin = 1.0.2 versions...
CVE-2023-30529
Jenkins Lucene-Search Plugin 387.v938aecbf7fe9 and earlier does not require POST requests for an HTTP endpoint, allowing attackers to reindex the database...
CVE-2022-36910
Jenkins Lucene-Search Plugin 370.v62a5f618cd3a and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to reindex the database and to obtain information about jobs otherwise inaccessible to them...