67 matches found
Admidio has Missing CSRF Protections on Custom List Deletion in mylist_function.php
Reported by: Juan Felipe Oz @JF0x0r LinkedIn Summary The delete mode handler in mylistfunction.php permanently deletes list configurations without validating a CSRF token. An attacker who can lure an authenticated user to a malicious page can silently destroy that user's list configurations —...
CVE-2025-1008
The Recently Purchased Products For Woo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘view’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2024-2946
The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution formerly WooLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's QR Code Widget in all versions up to, and including, 2.8.4 due to insufficient input sanitization...
CVE-2024-2664
The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown Widget in all versions up to, and including, 4.10.24 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
EUVD-2017-10166
Malware in sbrugna...
EUVD-2024-42139
Malicious code in bioql PyPI...
EUVD-2024-34120
Malicious code in bioql PyPI...
EUVD-2025-4850
Malicious code in bioql PyPI...
EUVD-2023-31724
Malicious code in bioql PyPI...
EUVD-2024-46395
Malicious code in bioql PyPI...
EUVD-2025-10325
Malicious code in bioql PyPI...
EUVD-2024-50972
Malicious code in bioql PyPI...
EUVD-2024-48502
Malicious code in bioql PyPI...
EUVD-2023-34061
Malicious code in bioql PyPI...
EUVD-2024-51717
Malicious code in bioql PyPI...
EUVD-2024-46432
Malicious code in bioql PyPI...
EUVD-2024-17000
Malicious code in bioql PyPI...
EUVD-2024-46736
Malicious code in bioql PyPI...