EUVD-2023-58998

Malicious code in bioql PyPI...

Payment Gateway for Telcell < 2.0.4 - Unauthenticated Open Redirect

Description The plugin does not validate the apiurl parameter before redirecting the user to its value, leading to an Open Redirect issue PoC https://localhost/wp-admin/admin.php?page=wc-settings=redirecttelcellformurl=https://www.google.com...

Denial Of Service (DOS)

Mofh is vulnerable to Denial of Service. The vulnerability is due to improper restriction of XML external entity reference when parsing API call responses. If the apiurl parameter is unchanged, the attacker must penetrate MyOwnFreeHost API responses. Otherwise, the attacker must have access to th...

Cross site scripting

Cross-site scripting XSS vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the apiurl parameter...