CVE-2022-30882

pyanxdns package in PyPI version 0.2 is vulnerable to code execution backdoor. The impact is: execute arbitrary code remote. When installing the pyanxdns package of version 0.2, the request package will be installed...

WordPress ClipArt plugin <= 0.2 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin ClipArt versions = 0.2...

CVE-2025-27338

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in graphems List Urls list-urls allows Reflected XSS.This issue affects List Urls: from n/a through = 0.2...

WordPress plugin AT Internet SmartTag 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability exis...

WordPress plugin List Urls 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress...

CVE-2025-30619

Cross-Site Request Forgery CSRF vulnerability in SpeakPipe SpeakPipe speakpipe-voicemail-for-websites allows Cross Site Request Forgery.This issue affects SpeakPipe: from n/a through = 0.2...

CVE-2025-30619

Cross-Site Request Forgery CSRF vulnerability in SpeakPipe SpeakPipe speakpipe-voicemail-for-websites allows Cross Site Request Forgery.This issue affects SpeakPipe: from n/a through = 0.2...

CVE-2025-30619

CVE-2025-30619 is a CSRF vulnerability in SpeakPipe – Voicemail for Websites. The vulnerability affects SpeakPipe versions up to 0.2 (vendor/product not clearly specified in initial doc; later Wordfence listing confirms SpeakPipe

WordPress plugin wordpress login form to anywhere 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin wordpress login form to...

CVE-2025-26904 WordPress WP Responsive Auto Fit Text plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in galop WP Responsive Auto Fit Text wp-responsive-slab-text allows DOM-Based XSS.This issue affects WP Responsive Auto Fit Text: from n/a through = 0.2...

CVE-2025-22342

Cross-Site Request Forgery CSRF vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issue affects WP Simple Sitemap: from n/a through = 0.2...

CVE-2025-23907

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in closed SOCIAL.NINJA allows Stored XSS. This issue affects SOCIAL.NINJA: from n/a through 0.2...

CVE-2025-23907 WordPress SOCIAL.NINJA plugin <= 0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in closed SOCIAL.NINJA allows Stored XSS. This issue affects SOCIAL.NINJA: from n/a through 0.2...

CVE-2025-23743

CVE-2025-23743 refers to a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Social Analytics (Martijn Scheybeler) that enables Stored XSS. The CVE description and the Red Hat entry both confirm the issue and its association with Social Analytics; affected version scope is S...

CVE-2025-23743 WordPress Social Analytics plugin <= 0.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in MartijnScheijbeler Social Analytics social-analytics allows Stored XSS.This issue affects Social Analytics: from n/a through = 0.2...

CVE-2025-22342

Cross-Site Request Forgery CSRF vulnerability in Jenst WP Simple Sitemap wp-simple-sitemap allows Stored XSS.This issue affects WP Simple Sitemap: from n/a through = 0.2...

CVE-2024-54438

CVE-2024-54438 affects the Gaxx Keywords WordPress plugin (GAxx Keywords) and is described as a CSRF to Stored XSS vulnerability affecting versions from n/a up through 0.2. Connected sources (Wordfence WordPress Vulnerability Details) indicate this CVE is currently Unpatched, with no exploitation...

WordPress plugin Twitter Follow Button 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

PT-2024-34716 · Unknown · Ml Responsive Audio Player With Playlist Shortcode

Name of the Vulnerable Software and Affected Versions: ML Responsive Audio player with playlist Shortcode versions 0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

WordPress plugin Search order by product SKU for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...