EUVD-2023-51920

Malicious code in bioql PyPI...

EUVD-2023-50825

Malicious code in bioql PyPI...

EUVD-2023-50455

Malicious code in bioql PyPI...

CVE-2023-47825

Cross-Site Request Forgery CSRF vulnerability in TienCOP WP EXtra plugin = 6.4 versions...

CVE-2023-46212

Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a through 6.2...

CVE-2023-46623

Improper Control of Generation of Code 'Code Injection' vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2...

CVE-2021-24936

The WP Extra File Types WordPress plugin before 0.5.1 does not have CSRF check when saving its settings, nor sanitise and escape some of them, which could allow attackers to make a logged in admin change them and perform Cross-Site Scripting attacks...

CVE-2024-13632

The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13632 WP Extra Fields <= 1.0.1 - Reflected XSS

The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13632 WP Extra Fields <= 1.0.1 - Reflected XSS

The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-13632

The WP Extra Fields WordPress plugin version 1.0.1 and prior versions are vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape a parameter before outputting it back to the page. This vulnerability could be exploited to target high-priv...

CVE-2024-13632: Improper Neutralization of Input During Web Page Generation

The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2025-8679 · WordPress · Wp Extra Fields

Name of the Vulnerable Software and Affected Versions: WP Extra Fields WordPress plugin version 1.0.1 Description: The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitised and escaped before being outputted back in the page. This could be used...

CVE-2023-46623

Improper Control of Generation of Code 'Code Injection' vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2...

Code injection

Improper Control of Generation of Code 'Code Injection' vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2...

CVE-2023-46623

CVE-2023-46623 affects the WordPress WP EXtra plugin (versions ≤ 6.2). The vulnerability is described as a remote code execution (RCE) due to improper control of code generation, reportedly exploitable via htaccess modifications. A fix is available in version 6.3. Reported CVSS scores indicate hi...

CVE-2023-46623: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2...

PT-2023-30121

Name of the Vulnerable Software and Affected Versions WP EXtra versions n/a through 6.2 Description The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability in TienCOP WP EXtra. This allows for code injection, which can be exploited by attackers...

CVE-2023-46212

Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a through 6.2...

Cross site request forgery (csrf)

Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a through 6.2...