72 matches found
PT-2026-1615
Name of the Vulnerable Software and Affected Versions Wish To Go plugin for WordPress versions up to and including 0.5.2 Description The Wish To Go plugin for WordPress is susceptible to Stored Cross-Site Scripting through shortcode attributes. Insufficient input sanitization and output escaping ...
CVE-2025-14053: Improper Neutralization of Input During Web Page Generation
The Wish To Go plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and including, 0.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...
CVE-2025-69334: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through = 3.3.0...
curl: A quiet New Year wish for security researchers
Hi curl Security Team and fellow security researchers, Sorry in advance if this isn’t a traditional security report. I know your time is valuable, and I truly respect the work you all do. I just wanted to take a quiet moment to wish every security researcher here those who report issues, those wh...
EUVD-2015-9333
Malware in sbrugna...
CVE-2025-49319: Missing Authorization
Missing Authorization vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wishlist for WooCommerce: from n/a through = 3.2.3...
Malicious code in rapper-wish (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab0c771060f1519932c1a3aa17e1bb894fe76c1fc825c39a1abe9f76b77d5874 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in rapper-wish
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2015-9493
The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...
CVE-2015-9531
The Easy Digital Downloads EDD Wish Lists extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2025-48237: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Wishlist for WooCommerce wish-list-for-woocommerce allows Stored XSS.This issue affects Wishlist for WooCommerce: from n/a through = 3.2.2...
Malicious code in watch-puss-in-boots-the-last-wish-2023-on-fullmovies-online-full-streamings-at-home-85 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in watch-puss-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1706 Malicious code in 7.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in 6.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1703 Malicious code in 5.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in 5.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in 4.7m-views-in-boots-the-last-wish-2023-full-online-free-on-streaming-at-home (npm)
--- -= Per source details. Do not edit below this line.=-...