CVE-2026-1055: Improper Neutralization of Input During Web Page Generation

The TalkJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.1.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

EUVD-2024-27605

Malicious code in bioql PyPI...

EUVD-2023-54574

Malicious code in bioql PyPI...

EUVD-2024-44331

Malicious code in bioql PyPI...

EUVD-2024-16407

Malicious code in bioql PyPI...

EUVD-2023-53914

Malicious code in bioql PyPI...

EUVD-2024-47717

Malicious code in bioql PyPI...

EUVD-2025-8057

Malicious code in bioql PyPI...

EUVD-2023-58725

Malicious code in bioql PyPI...

EUVD-2024-27908

Malicious code in bioql PyPI...

EUVD-2023-24101

Malicious code in bioql PyPI...

CVE-2024-6669

The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-12581

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-0612

The Content Views – Post Grid, Slider, Accordion Gutenberg Blocks and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2024-8680

The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.9.16 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2023-6494

The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-2613: Improper Neutralization of Input During Web Page Generation

The Login Manager – Design Login Page, View Login Activity, Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom logo and background URLs in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping. This makes...

PT-2025-14846

Name of the Vulnerable Software and Affected Versions Simple Banner plugin for WordPress versions up to and including 3.0.5 Description The issue allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages that will execute whenever a use...

CVE-2025-2076

The binlayerpress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...

PT-2025-11303

Name of the Vulnerable Software and Affected Versions: GDPR Cookie Compliance WordPress plugin versions prior to 4.15.7 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks due to insufficient input sanitization and output escaping of...