PT-2025-41756

Name of the Vulnerable Software and Affected Versions Plus Addons for Elementor versions prior to 6.3.16 Description The Plus Addons for Elementor WordPress plugin does not properly sanitize SVG file contents. This could allow users with Author-level access or higher to execute Stored Cross-Site...

EUVD-2000-0716

Malware in sbrugna...

EUVD-2012-0999

Malware in sbrugna...

EUVD-2005-1714

Malware in sbrugna...

EUVD-2025-32405

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

CVE-2025-10383 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

CVE-2025-10383 Contest Gallery – Upload, Vote & Sell with PayPal and Stripe <= 27.0.2 - Authenticated (Author+) Stored Cross-Site Scripting

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple form field parameters in all versions up to, and including, 27.0.2. This is due to insufficient input sanitization and output escaping on user-supplied...

EUVD-2025-27637

Malicious code in bioql PyPI...

EUVD-2025-28394

Malicious code in bioql PyPI...

EUVD-2025-4071

Malicious code in bioql PyPI...

EUVD-2023-41808

Malicious code in bioql PyPI...

EUVD-2023-3029

Malicious code in bioql PyPI...

EUVD-2025-13827

Malicious code in bioql PyPI...

EUVD-2025-6646

Malicious code in bioql PyPI...

EUVD-2025-5633

Malicious code in bioql PyPI...

EUVD-2024-49797

Malicious code in bioql PyPI...

EUVD-2025-26985

Malicious code in bioql PyPI...

EUVD-2024-32654

Malicious code in bioql PyPI...

CVE-2025-10380

The CVE-2025-10380 entry describes a Server-Side Template Injection (SSTI) in the WordPress plugin Advanced Views – Display Posts, Custom Fields, and More (ACF-Views) affecting all versions up to and including 3.7.19. Root cause: insufficient input sanitization and lack of access control when pro...

PT-2025-39110

Name of the Vulnerable Software and Affected Versions Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress versions up to and including 3.7.19 Description The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is susceptible to Server-Side Templat...