CVE-2026-12743: Improper Neutralization of Special Elements used in an SQL Command

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

EUVD-2025-4224

Malicious code in bioql PyPI...

EUVD-2025-13766

Malicious code in bioql PyPI...

EUVD-2024-52559

Malicious code in bioql PyPI...

EUVD-2025-28662

Malicious code in bioql PyPI...

CVE-2025-47615

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flowdee Amazon Product in a Post amazon-product-in-a-post-plugin allows Stored XSS.This issue affects Amazon Product in a Post: from n/a through = 5.2.2...

CVE-2025-47615

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flowdee Amazon Product in a Post amazon-product-in-a-post-plugin allows Stored XSS.This issue affects Amazon Product in a Post: from n/a through = 5.2.2...

WordPress Amazon Product in a Post plugin <= 5.2.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Amazon Product in a Post versions = 5.2.2...

CVE-2025-47615

CVE-2025-47615 is a Stored XSS in the WordPress plugin Amazon Product in a Post by flowdee, affecting versions n/a through 5.2.2. The issue stems from improper input neutralization during web page generation. Public sources (NVD/PATCHSTACK/Wordfence listing) indicate the vulnerability exists and ...

CVE-2025-47615 WordPress Amazon Product in a Post plugin <= 5.2.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flowdee Amazon Product in a Post amazon-product-in-a-post-plugin allows Stored XSS.This issue affects Amazon Product in a Post: from n/a through = 5.2.2...

CVE-2025-47615 WordPress Amazon Product in a Post <= 5.2.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flowdee Amazon Product in a Post allows Stored XSS. This issue affects Amazon Product in a Post: from n/a through 5.2.2...

WordPress plugin Amazon Product in a Post 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Amazon Product in a Post plugin, which stems from the application's lack of effective filtering and escaping of...

PT-2025-20183 · Unknown · Flowdee Amazon Product In A Post

Name of the Vulnerable Software and Affected Versions: flowdee Amazon Product in a Post versions n/a through 5.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

CVE-2025-47615: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flowdee Amazon Product in a Post amazon-product-in-a-post-plugin allows Stored XSS.This issue affects Amazon Product in a Post: from n/a through = 5.2.2...

CVE-2025-26568

Cross-Site Request Forgery CSRF vulnerability in jensmueller Easy Amazon Product Information easy-amazon-product-information allows Stored XSS.This issue affects Easy Amazon Product Information: from n/a through = 4.0.1...

CVE-2025-26568

Cross-Site Request Forgery CSRF vulnerability in jensmueller Easy Amazon Product Information easy-amazon-product-information allows Stored XSS.This issue affects Easy Amazon Product Information: from n/a through = 4.0.1...

CVE-2025-26568

CVE-2025-26568 : CSRF to Stored XSS in WordPress plugin “Easy Amazon Product Information” by jensmueller, affecting version 4.0.1 and earlier. The CVE entry documents a CSRF vulnerability that allows stored XSS. According to the provided data, the affected software is the Easy Amazon Product Info...

CVE-2025-26568 WordPress Easy Amazon Product Information plugin <= 4.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in jensmueller Easy Amazon Product Information easy-amazon-product-information allows Stored XSS.This issue affects Easy Amazon Product Information: from n/a through = 4.0.1...

CVE-2025-26568 WordPress Easy Amazon Product Information plugin <= 4.0.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in jensmueller Easy Amazon Product Information easy-amazon-product-information allows Stored XSS.This issue affects Easy Amazon Product Information: from n/a through = 4.0.1...

WordPress Easy Amazon Product Information plugin <= 4.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Abdi Pranata in WordPress Plugin Easy Amazon Product Information versions = 4.0.1...