EUVD-2026-87781

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

EUVD-2026-87780

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

EUVD-2026-87779

Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

EUVD-2026-87778

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29...

CVE-2026-32412 WordPress Gift Up Gift Cards for WordPress and WooCommerce plugin <= 3.1.7 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Gift Up! Gift Up Gift Cards for WordPress and WooCommerce gift-up allows Server Side Request Forgery.This issue affects Gift Up Gift Cards for WordPress and WooCommerce: from n/a through = 3.1.7...

CVE-2026-32412

The CVE-2026-32412 entry describes a Server-Side Request Forgery (SSRF) vulnerability in the Gift Up Gift Cards for WordPress and WooCommerce plugin. Affected software: Gift Up Gift Cards for WordPress and WooCommerce plugin, version range from unspecified (n/a) up to and including 3.1.7. Root ca...

EUVD-2022-47523

Malicious code in bioql PyPI...

EUVD-2023-29013

Malicious code in bioql PyPI...

EUVD-2022-46480

Malicious code in bioql PyPI...

EUVD-2023-27787

Malicious code in bioql PyPI...

EUVD-2024-33084

Malicious code in bioql PyPI...

CVE-2025-52782

CVE-2025-52782 affects WordPress plugin Scroll UP (versions n/a through 2.0). It is a Cross-Site Scripting (Reflected XSS) vulnerability arising from improper input neutralization during web page generation. The provided sources list a CVSS v3.1 base score of 7.1 ( HIGH ) and indicate the vulnera...

WordPress plugin Scroll UP 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2023-23701

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Andrew @ Geeenville Web Design Easy Sign Up plugin = 3.4.1 versions...

CVE-2023-5703

The Gift Up Gift Cards for WordPress and WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'giftup' shortcode in all versions up to, and including, 2.20.1 due to insufficient input sanitization and output escaping on user supplied attributes. This make...

CVE-2025-25105 WordPress Pop Up Plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in coffeestudios Pop Up allows Stored XSS. This issue affects Pop Up: from n/a through 0.1...

CVE-2025-25105 WordPress Pop Up Plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in coffeestudios Pop Up popup-seo-optimized allows Stored XSS.This issue affects Pop Up: from n/a through = 0.1...

WordPress plugin Pop Up 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress Pop Up Plugin <= 0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyễn Khánh Hào in WordPress Plugin Pop Up versions = 0.1...

CVE-2024-56015 WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability

Cross-Site Request Forgery CSRF vulnerability in John Godley Tidy Up allows Reflected XSS.This issue affects Tidy Up: from n/a through 1.3...