CVE-2023-25052

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin = 1.12.5 versions...

EUVD-2023-31218

Malicious code in bioql PyPI...

EUVD-2023-29031

Malicious code in bioql PyPI...

EUVD-2023-31226

Malicious code in bioql PyPI...

EUVD-2024-43320

Malicious code in bioql PyPI...

EUVD-2024-35442

Malicious code in bioql PyPI...

EUVD-2023-43046

Malicious code in bioql PyPI...

EUVD-2023-37490

Malicious code in bioql PyPI...

EUVD-2023-37488

Malicious code in bioql PyPI...

EUVD-2025-3868

Malicious code in bioql PyPI...

CVE-2025-24674

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denis Cherniatev ShMapper by Teplitsa shmapper-by-teplitsa allows Stored XSS.This issue affects ShMapper by Teplitsa: from n/a through = 1.5.0...

CVE-2023-27450

Unauth. Stored Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-27442

Cross-Site Request Forgery CSRF vulnerability in Teplitsa of social technologies Leyka plugin = 3.29.2 versions...

CVE-2023-39314

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Teplitsa of social technologies Leyka plugin = 3.30.2 versions...

CVE-2023-33327

Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.30.2...

CVE-2025-24674

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Denis Cherniatev ShMapper by Teplitsa shmapper-by-teplitsa allows Stored XSS.This issue affects ShMapper by Teplitsa: from n/a through = 1.5.0...

WordPress ShMapper by Teplitsa Plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khang Duong in WordPress Plugin ShMapper by Teplitsa versions = 1.5.0...

WordPress plugin ShMapper by Teplitsa 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2025-5494 · Teplitsa · Shmapper

Name of the Vulnerable Software and Affected Versions: ShMapper by Teplitsa versions 1.5.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

CVE-2024-12518

CVE-2024-12518 concerns the WordPress plugin ShMapper by Teplitsa. The issue is a Stored Cross-Site Scripting vulnerability in the shmMap shortcode, caused by insufficient input sanitization and output escaping on user-supplied attributes. It affects the plugin up to version 1.4.18 (and likely ea...