WordPress Ninja Job Board < 1.3.3 - Direct Request

WordPress Ninja Job Board plugin prior to 1.3.3 is susceptible to a direct request vulnerability. The plugin does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated directory listing which allows the download of uploaded resumes. id: CVE-2022-2544...

CVE-2026-109695

The WPManageNinja FluentCart plugin (versions

CVE-2026-108484

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27...

EUVD-2026-101527

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.This issue affects Best Payments Plugin for WP: from n/a through 4.6.27...

CVE-2026-108484

The WPManageNinja Best Payments Plugin for WP (wp-payment-form) is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This security flaw affects versions up to and including 4.6.27 . While the vulnerability allows for persistent scr...

CVE-2023-1430

Update 2023-06-12: You no longer need the snippet. WPManageNinja patched the vulnerability two hours after public disclosure 93 days after reporting. Update 2024-01-27: The related issue with with everlasting hash values is now fully addressed. Responsible disclosure of unpatched vulnerability...

CVE-2025-67971

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja FluentCart fluent-cart allows Reflected XSS.This issue affects FluentCart: from n/a through 1.3.0...

PT-2026-21045

Name of the Vulnerable Software and Affected Versions FluentCart versions prior to 1.3.0 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject...

CVE-2025-67971: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPManageNinja FluentCart fluent-cart allows Reflected XSS.This issue affects FluentCart: from n/a through 1.3.0...

EUVD-2025-3929

Malicious code in bioql PyPI...

EUVD-2023-46411

Malicious code in bioql PyPI...

EUVD-2024-45600

Malicious code in bioql PyPI...

EUVD-2022-49911

Malicious code in bioql PyPI...

EUVD-2023-28466

Malicious code in bioql PyPI...

EUVD-2024-35396

Malicious code in bioql PyPI...

EUVD-2024-42340

Malicious code in bioql PyPI...

EUVD-2024-20999

Malicious code in bioql PyPI...

EUVD-2024-20998

Malicious code in bioql PyPI...

EUVD-2022-49912

Malicious code in bioql PyPI...

CVE-2024-47302

Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fluent Support: from n/a through = 1.8.0...