CVE-2025-10185 NEX-Forms – Ultimate Forms Plugin for WordPress <= 9.1.6 - Authenticated (Admin+) SQL Injection

The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in the action nfloadformentries in all versions up to, and including, 9.1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2013-1921

Malware in sbrugna...

EUVD-2012-3393

Malware in sbrugna...

EUVD-2012-3392

Malware in sbrugna...

EUVD-2013-1920

Malware in sbrugna...

EUVD-2022-40678

Malicious code in bioql PyPI...

EUVD-2022-45084

Malicious code in bioql PyPI...

WordPress Plugin Directory Pro Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

MAL-2025-43524 Malicious code in astro-sagitta-exobiology-html-webpack-plugin (npm)

The package astro-sagitta-exobiology-html-webpack-plugin was found to contain malicious code...

WordPress plugin AutoWP has a security vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control disruption vulnerability exists in the WordPress plugin AutoWP, which stems from a lac...

PT-2025-33460 · WordPress · Bizcalendar Web

Name of the Vulnerable Software and Affected Versions: BizCalendar Web plugin for WordPress versions prior to 1.1.0.51 Description: The BizCalendar Web plugin for WordPress is vulnerable to Local File Inclusion via the bizcalv shortcode. Authenticated attackers with Contributor-level access and...

WordPress esri-map-view cross-site scripting vulnerability

WordPress esri-map-view is used to embed Esri/ArcGIS maps or scenes in websites. The plugin realizes map display through short code, supports selecting base map, setting initial view angle, adding custom layers, pop-up information window and other functions, and can embed preconfigured web maps o...

org.glassfish.main.admingui:console-cluster-plugin (5.0), org.glassfish.main.admingui:console-common-full-plugin (5.0) +8 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (5.0)

org.glassfish.main.admingui:console-common MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.0 -...

org.glassfish.main.admingui:console-cluster-plugin (4.0-b90), org.glassfish.main.admingui:console-common-full-plugin (4.0-b90) +11 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (4.0-b90)

org.glassfish.main.admingui:console-common MAVEN version 4.0-b90 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.0-b90 -...

org.glassfish.main.admingui:console-cluster-plugin (4.1.1), org.glassfish.main.admingui:console-common-full-plugin (4.1.1) +11 more potentially affected by CVE-2024-10031 via org.glassfish.main.admingui:console-common (4.1.1)

org.glassfish.main.admingui:console-common MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.1.1 -...

org.glassfish.main.admingui:console-cluster-plugin (5.1.0-rc1), org.glassfish.main.admingui:console-common-full-plugin (5.1.0-rc1) +7 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (5.1.0-rc1)

org.glassfish.main.admingui:console-common MAVEN version 5.1.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.1.0-rc1 -...

org.glassfish.main.admingui:console-cluster-plugin (5.1.0), org.glassfish.main.admingui:console-common-full-plugin (5.1.0) +9 more potentially affected by CVE-2024-10029 via org.glassfish.main.admingui:console-common (5.1.0)

org.glassfish.main.admingui:console-common MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 5.1.0 -...

org.glassfish.main.admingui:console-cluster-plugin (>=7.0.0-m1, <=7.0.25), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=7.0.25) +11 more potentially affected by CVE-2024-9342 via org.glassfish.main.admingui:console-common (>=7.0.0-m1, <=7.0.25)

org.glassfish.main.admingui:console-common MAVEN version =7.0.0-m1, =7.0.0-m1, =7.0.16, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m1, =7.0.0-m2, =7.0.0-m1, =7.0.0-m1, =7.0.25 Source cves: CVE-2024-9342 Source advisory: GHSA-99F7-HP6J-V6Q4...

CVE-2023-23871

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Webdzier Button plugin = 1.1.23 versions...

Cross-site Scripting (XSS)

Overview org.webjars.bowergithub.davidstutz:bootstrap-multiselect is a JQuery multiselect plugin based on Twitter Bootstrap. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the post.php script. An attacker can execute scripts in the context of the user's brows...