Malicious code in test-mlw2-blind-bogie (npm)

The package test-mlw2-blind-bogie was found to contain malicious code...

Malicious code in test-mlw2-blind-grump (npm)

The package test-mlw2-blind-grump was found to contain malicious code...

MAL-2025-34967 Malicious code in test-mlw2-blind-bogie (npm)

The package test-mlw2-blind-bogie was found to contain malicious code...

MAL-2025-8504 Malicious code in @malware-test-blind-vexed-sorer-bluey/test-mlw3-blind-vexed-sorer-bluey (npm)

The package @malware-test-blind-vexed-sorer-bluey/test-mlw3-blind-vexed-sorer-bluey was found to contain malicious code...

MAL-2025-34968 Malicious code in test-mlw2-blind-grump (npm)

The package test-mlw2-blind-grump was found to contain malicious code...

CVE-2025-54678

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through = 3.8.15...

CVE-2025-49267

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Blind SQL Injection.This issue affects Frontend Admin by DynamiApps: from n/a through = 3.28.3...

CVE-2025-49033

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.5.3...

CVE-2025-54678 WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hassantafreshi Easy Form Builder allows Blind SQL Injection. This issue affects Easy Form Builder: from n/a through 3.8.15...

CVE-2025-54678 WordPress Easy Form Builder Plugin <= 3.8.15 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in hassantafreshi Easy Form Builder easy-form-builder allows Blind SQL Injection.This issue affects Easy Form Builder: from n/a through = 3.8.15...

CVE-2025-54678

CVE-2025-54678 is an SQL Injection vulnerability in the WordPress plugin Easy Form Builder (versions up to 3.8.15). The flaw is described as improper neutralization of special elements used in an SQL command (blind SQL injection). Public references (Patchstack, Red Hat, CVE list) confirm the affe...

CVE-2025-49033

CVE-2025-49033 describes an SQL Injection vulnerability in WordPress plugin ProfileGrid (Metagauss ProfileGrid) that allows authenticated attackers to perform blind SQL injection. Affected versions are ProfileGrid up to 5.9.5.3. Reported root cause is improper neutralization of special elements u...

CVE-2025-49033 WordPress ProfileGrid <= 5.9.5.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid allows Blind SQL Injection. This issue affects ProfileGrid : from n/a through 5.9.5.3...

CVE-2025-49033 WordPress ProfileGrid plugin <= 5.9.5.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Blind SQL Injection.This issue affects ProfileGrid : from n/a through = 5.9.5.3...

CVE-2025-49267 WordPress Frontend Admin by DynamiApps <= 3.28.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shabti Kaplan Frontend Admin by DynamiApps allows Blind SQL Injection. This issue affects Frontend Admin by DynamiApps: from n/a through 3.28.3...

CVE-2025-49267 WordPress Frontend Admin by DynamiApps plugin <= 3.28.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Blind SQL Injection.This issue affects Frontend Admin by DynamiApps: from n/a through = 3.28.3...

CVE-2025-49267

CVE-2025-49267 affects WordPress plugin Frontend Admin by DynamiApps (versions up to and including 3.28.3). The issue is an SQL Injection due to improper neutralization of special elements, enabling blind SQL injection. Public references confirm affected software and version range; multiple sourc...

WordPress plugin Frontend Admin by DynamiApps SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

PT-2025-33175 · Metagauss · Profilegrid

Name of the Vulnerable Software and Affected Versions: Metagauss ProfileGrid versions through 5.9.5.3 Description: An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in Metagauss ProfileGrid, allowing for blind SQL injection. Recommendations...

WordPress plugin Easy Form Builder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...