41 matches found
CVE-2021-24545
CVE-2021-24545 WP HTML Author Bio alert/XSS/ Then view post made by the author to trigger the XSS Video POC: https://www.youtube.com/watch?v=fhzJZ5hSI-g...
CVE-2021-24545
CVE-2021-24545 This is an XSS vulnerability discovered in a plugin that is no longer distributed as a plugin. WordPress Plugin HTML Author Bio description XSS This vulnerability is caused by improper validation of the description parameter in /wp-admin/profile.php. A remote attacker can exploit...
EUVD-2021-25710
Malware in sbrugna...
EUVD-2025-9291
Malicious code in bioql PyPI...
EUVD-2024-28465
Malicious code in bioql PyPI...
EUVD-2024-43299
Malicious code in bioql PyPI...
CVE-2021-24545
The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...
CVE-2025-31731
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Philip John Author Bio Shortcode author-bio-shortcode allows Stored XSS.This issue affects Author Bio Shortcode: from n/a through = 2.5.3...
WordPress Author Bio Shortcode Plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Author Bio Shortcode versions = 2.5.3...
CVE-2025-31731
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Philip John Author Bio Shortcode author-bio-shortcode allows Stored XSS.This issue affects Author Bio Shortcode: from n/a through = 2.5.3...
CVE-2025-31731 WordPress Author Bio Shortcode Plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Philip John Author Bio Shortcode author-bio-shortcode allows Stored XSS.This issue affects Author Bio Shortcode: from n/a through = 2.5.3...
CVE-2025-31731
CVE-2025-31731 is a Stored XSS vulnerability in the WordPress plugin Author Bio Shortcode (vulnerable up to 2.5.3). The issue stems from improper neutralization of input during web page generation, enabling stored cross-site scripting. Exploitation would require authentication (Contributor+ level...
CVE-2025-31731 WordPress Author Bio Shortcode Plugin <= 2.5.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Philip John Author Bio Shortcode allows Stored XSS. This issue affects Author Bio Shortcode: from n/a through 2.5.3...
WordPress plugin Author Bio Shortcode 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...
CVE-2024-30545
Cross-Site Request Forgery CSRF vulnerability in Nick Powers Social Author Bio allows Stored XSS.This issue affects Social Author Bio: from n/a through 2.4...
CVE-2024-49229
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arifnezami Better Author Bio better-author-bio allows Reflected XSS.This issue affects Better Author Bio: from n/a through = 2.7.10.11...
CVE-2024-49229
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arifnezami Better Author Bio better-author-bio allows Reflected XSS.This issue affects Better Author Bio: from n/a through = 2.7.10.11...
CVE-2024-49229
Cross-Site Request Forgery CSRF vulnerability in Arif Nezami Better Author Bio allows Cross-Site Scripting XSS.This issue affects Better Author Bio: from n/a through 2.7.10.11...
CVE-2024-49229 WordPress Better Author Bio plugin <= 2.7.10.11 - CSRF to Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in arifnezami Better Author Bio better-author-bio allows Reflected XSS.This issue affects Better Author Bio: from n/a through = 2.7.10.11...