CVE-2025-10406

CVE-2025-10406 affects the BlindMatrix e-Commerce WordPress plugin. The vulnerability arises from unvalidated shortcode attributes that are used to build file includes, enabling Local File Inclusion (LFI) when exploited by authenticated users (e.g., contributors). The issue is triggered by genera...

PT-2025-42229

The BlindMatrix e-Commerce WordPress plugin before 3.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users, such as contributors, to perform LFI attacks...

EUVD-2021-11380

Malware in sbrugna...

EUVD-2018-20769

Malware in sbrugna...

CVE-2025-9876

The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

EUVD-2023-12169

Malicious code in bioql PyPI...

EUVD-2023-12425

Malicious code in bioql PyPI...

EUVD-2023-12170

Malicious code in bioql PyPI...

EUVD-2022-52104

Malicious code in bioql PyPI...

EUVD-2022-43315

Malicious code in bioql PyPI...

EUVD-2022-51972

Malicious code in bioql PyPI...

EUVD-2022-52049

Malicious code in bioql PyPI...

EUVD-2022-51819

Malicious code in bioql PyPI...

EUVD-2022-51996

Malicious code in bioql PyPI...

EUVD-2022-52056

Malicious code in bioql PyPI...

EUVD-2022-51997

Malicious code in bioql PyPI...

EUVD-2023-12263

Malicious code in bioql PyPI...

EUVD-2023-12233

Malicious code in bioql PyPI...

EUVD-2023-12239

Malicious code in bioql PyPI...

EUVD-2022-52054

Malicious code in bioql PyPI...