EUVD-2023-54568

Malicious code in bioql PyPI...

EUVD-2023-51091

Malicious code in bioql PyPI...

EUVD-2024-36249

Malicious code in bioql PyPI...

EUVD-2022-37915

Malicious code in bioql PyPI...

EUVD-2023-54624

Malicious code in bioql PyPI...

EUVD-2023-54534

Malicious code in bioql PyPI...

CVE-2025-57979 WordPress AuthorSure Plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Russell Jamieson AuthorSure authorsure allows Stored XSS.This issue affects AuthorSure: from n/a through = 2.3...

WordPress plugin WP Proposals 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

WordPress Analytics Reduce Bounce Rate plugin <= 2.3 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Analytics Reduce Bounce Rate versions = 2.3...

PT-2025-37153

The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the unbounce options function. This makes it possible for unauthenticated attackers to modify Google...

WordPress ProRange Theme <= 2.3 is vulnerable to Local File Inclusion

Software ProRange Type Theme Vulnerable versions = 2.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 5a4cba513a6c Credits Bonds Required privilege Unauthenticated Published 8...

CVE-2025-31425

CVE-2025-31425 relates to the WordPress plugin “WP Lead Capturing Pages” (versions prior to 2.3). The vulnerability is caused by Missing Authorization stemming from incorrectly configured access control, enabling an attacker to perform Arbitrary Content Deletion. The CVSS v3.1 score is 7.5 (High)...

WordPress plugin WP Lead Capturing Pages security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2025-8807 xujeff tianti 天梯 save authorization

A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been declared as critical. This vulnerability affects unknown code of the file /tianti-module-admin/user/ajax/save. The manipulation leads to missing authorization. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2025-48501

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running...

CVE-2025-48501

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running...

PT-2025-27087 · Mbstore · Mbstore

Name of the Vulnerable Software and Affected Versions: MBStore - Digital WooCommerce WordPress Theme versions 2.3 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows...

WordPress Responsive Food and Drink Menu plugin <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via display_pdf_menus Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via displaypdfmenus Shortcode vulnerability discovered by Gilang in WordPress Plugin Responsive Food and Drink Menu versions = 2.3...

WordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability

WordPress MBStore - Digital WooCommerce WordPress Theme = 2.3 - Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme MBStore - Digital WooCommerce WordPress Theme versions = 2.3...

CVE-2025-50020

CVE-2025-50020 affects the WordPress plugin RDFa Breadcrumb (versions up to 2.3). Root cause: improper neutralization of input during web page generation, enabling stored XSS. Public details show no patch status in the provided documents; remediation guidance from PT-Security indicates updating t...