84 matches found
EUVD-2024-43467
Malicious code in bioql PyPI...
EUVD-2023-36552
Malicious code in bioql PyPI...
WordPress Simple User Registration plugin <= 6.8 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Peter Thaleikis in WordPress Plugin Simple User Registration versions = 6.8...
CVE-2025-4334
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to registe...
CVE-2025-4334
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to registe...
CVE-2025-4334 Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to registe...
PT-2025-26912 · WordPress · Simple User Registration
Name of the Vulnerable Software and Affected Versions: The Simple User Registration plugin for WordPress versions up to, and including, 6.3 Description: The issue is due to insufficient restrictions on user meta values that can be supplied during registration, making it possible for unauthenticat...
WordPress plugin Simple User Registration 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
WordPress Simple User Registration 6.3 Privilege Escalation
WordPress Simple User Registration plugin versions 6.3 and below suffer from an unauthenticated privilege escalation vulnerability. This is due to insufficient restrictions on user meta values that can be supplied during registration. This makes it possible for unauthenticated attackers to regist...
CVE-2023-32298
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kathy Darling Simple User Listing plugin = 1.9.2 versions...
CVE-2025-3489
A vulnerability was found in Nababur Simple-User-Management-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument name/username leads to cross site scripting. The attack may be launched...
CVE-2025-3489 Nababur Simple-User-Management-System register.php cross site scripting
A vulnerability was found in Nababur Simple-User-Management-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument name/username leads to cross site scripting. The attack may be launched...
CVE-2025-3489
CVE-2025-3489 affects Nababur Simple-User-Management-System 1.0. The issue is in the file /register.php where manipulation of the name/username argument leads to cross-site scripting. The attack can be launched remotely and the exploit has been publicly disclosed. Multiple sources corroborate the...
CVE-2025-3489 Nababur Simple-User-Management-System register.php cross site scripting
A vulnerability was found in Nababur Simple-User-Management-System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument name/username leads to cross site scripting. The attack may be launched...
PT-2025-15895 · Unknown · Nababur Simple-User-Management-System
Name of the Vulnerable Software and Affected Versions: Nababur Simple-User-Management-System version 1.0 Description: A vulnerability was found in the file /register.php, where the manipulation of the name/username argument leads to cross-site scripting. The attack may be launched remotely. The...
CVE-2025-25140
Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...
CVE-2025-25140
Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...
CVE-2025-25140
CVE-2025-25140 : CSRF in WordPress plugin Simple User Profile (versions
CVE-2025-25140 WordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...
CVE-2025-25140 WordPress Simple User Profile plugin <= 1.9 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Scriptonite Simple User Profile simple-user-profile allows Stored XSS.This issue affects Simple User Profile: from n/a through = 1.9...