EUVD-2018-21752

MyBB Last User's Threads in Profile Plugin 1.2 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by crafting thread subjects with script tags. Attackers can create threads with script payloads in the subject field that execute when users...

EUVD-2023-56188

Malicious code in bioql PyPI...

WordPress WP-CRM System plugin <= 3.4.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Mika in WordPress Plugin WP-CRM System versions = 3.4.2...

CVE-2023-51475

Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0...

CVE-2023-51475

CVE-2023-51475 is an Unrestricted Upload of File with Dangerous Type issue in the WP MLM SOFTWARE PLUGIN (WP MLM PLUGIN) with affected versions from n/a through 4.0. The connected data confirms this CVE is tied to an unauthenticated arbitrary file upload vulnerability in WP MLM, and the patch sta...

PT-2023-31839 · WordPress · Ioss Wp Mlm Software Plugin

Name of the Vulnerable Software and Affected Versions: WP MLM SOFTWARE PLUGIN versions n/a through 4.0 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in the IOSS WP MLM SOFTWARE PLUGIN. This allows for the upload of files with potentially...

PT-2023-21269 · Unknown · Mmrs151 Daily Prayer Time

Name of the Vulnerable Software and Affected Versions: mmrs151 Daily Prayer Time plugin versions prior to 2023.03.08 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a...

Active Directory Integration / LDAP Integration < 3.6.95 - Reflected Cross-Site Scripting

The plugin does not escape the testusername parameter before outputting it back in the settings page, leading to a Reflected Cross-Site Scripting issue PoC...

Malware Finder <= 1.1 - Cross-Site Scripting (XSS)

Plugin is still affected and has been closed...