CVE-2025-10635

The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks...

CVE-2025-10635 Find Me On <= 2.0.9.1 - Subscriber+ SQL Injection

The Find Me On WordPress plugin through 2.0.9.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers and above to perform SQL injection attacks...

CVE-2025-10635

The Find Me On WordPress plugin (versions through 2.0.9.1 ) contains a SQL injection vulnerability due to a failure to properly sanitize and escape a parameter before its use in a SQL statement. This flaw allows users with subscriber privileges or higher to execute arbitrary SQL commands, which c...

CVE-2025-10494

The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation when deleting profile pictures in all versions up to, and including, 1.4.89. This makes it possible for authenticated attackers, with...

EUVD-2017-11523

Malware in sbrugna...

EUVD-2018-1412

Malware in sbrugna...

EUVD-2019-9570

Malware in sbrugna...

EUVD-2019-9572

Malware in sbrugna...

EUVD-2019-5580

Malware in sbrugna...

EUVD-2019-5024

Malware in sbrugna...

EUVD-2020-15947

Malware in sbrugna...

EUVD-2019-9569

Malware in sbrugna...

EUVD-2018-17778

Malware in sbrugna...

EUVD-2015-7266

Malware in sbrugna...

EUVD-2019-9568

Malware in sbrugna...

EUVD-2020-26926

Malware in sbrugna...

EUVD-2025-32423

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...

CVE-2025-9243 Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the getccorders and updateorderstatus functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with...

CVE-2025-9243

CVE-2025-9243 affects the WordPress plugin Cost Calculator Builder. A missing capability check in get_cc_orders and update_order_status permits authenticated users with Subscriber-level access (or higher) to access order management and modify order statuses in all versions up to and including 3.5...

CVE-2025-8726 WP Photo Album Plus <= 9.0.11.006 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wppa_user_upload

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...