WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to SQL Injection via request parameters in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This make...

oneidentity-safeguard-sessions-plugin-sdk (>=1.4.2, <=1.6.0) potentially affected by unknown CVE via vcrpy (2.1.0)

vcrpy PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - oneidentity-safeguard-sessions-plugin-sdk =1.4.2, =1.6.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

commonmeta-py (>=0.10.0, <=0.16.3), foodreversefda (>=0.1.0, <=0.1.8) +5 more potentially affected by unknown CVE via vcrpy (5.1.0)

vcrpy PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - commonmeta-py =0.10.0, =0.1.0, =1.8.0, =1.2.1, =1.0.6, =2.166.0, =2.247.0 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

airbyte-source-gitlab (>=2.1.1, <=4.4.0.dev202506251856), airbyte-source-quickbooks (>=3.0.2, <=4.0.4) +9 more potentially affected by unknown CVE via vcrpy (4.1.1)

vcrpy PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - airbyte-source-gitlab =2.1.1, =3.0.2, =0.2.3, =1.0.0, =1.0.0, =8.2.1, =1.7.1, =1.0.2, =2.54.0, =2.92.0 Source cves: unknown CVE Source advisory:...

oneidentity-safeguard-sessions-plugin-sdk (>=1.1.7, <=1.3.4) potentially affected by unknown CVE via vcrpy (2.0.1)

vcrpy PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - oneidentity-safeguard-sessions-plugin-sdk =1.1.7, =1.3.4 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-938G...

airbyte-source-linnworks (>=0.1.7, <=0.1.66), data-harvesting (2.0.0) +5 more potentially affected by unknown CVE via vcrpy (6.0.2)

vcrpy PYPI version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vcrpy and may be impacted: - airbyte-source-linnworks =0.1.7, =4.0.10, =1.3.0, =0.3.0, =0.4.1 - vcrpy-encrypt 0.9.2 Source cves: unknown CVE Source advisory: OSV:GHSA-RPJ2-4HQ8-93...

geopackage-python (>=2.1.0.1, <=2.2.0.2), getccwarc (>=0.0.1.dev23, <=0.0.1.dev34) +5 more potentially affected by CVE-2025-71176 via pytest (4.6.3)

pytest PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - geopackage-python =2.1.0.1, =0.0.1.dev23, =1.2.2, =2019.6.13, =0.0.2, =0.0.3 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Sessions versions = 3.2.0...

CVE-2025-57890 WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...

CVE-2025-57890 WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...

WordPress plugin Sessions has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

alfrodull (0.1.0), getccwarc (>=0.0.1.dev23, <=0.0.1.dev34) +3 more potentially affected by CVE-2024-5569 via zipp (0.5.1)

zipp PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - alfrodull 0.1.0 - getccwarc =0.0.1.dev23, =1.2.2, =0.0.2, =0.0.3 Source cves: CVE-2024-5569 Source advisory: OSV:GHSA-JFMJ-5V4G-7637...