EUVD-2025-5397

Malicious code in bioql PyPI...

CVE-2025-26881

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Sticky Content sticky-menu-block allows Stored XSS.This issue affects Sticky Content: from n/a through = 1.0.1...

CVE-2025-26881

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Sticky Content sticky-menu-block allows Stored XSS.This issue affects Sticky Content: from n/a through = 1.0.1...

CVE-2025-26881 WordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Sticky Content sticky-menu-block allows Stored XSS.This issue affects Sticky Content: from n/a through = 1.0.1...

CVE-2025-26881

CVE-2025-26881 is an authenticated, stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin affected area named Sticky Content . The issue targets Sticky Content versions from n/a up to and including 1.0.1, as described in the CVE entry. The connected Wordfence vulnerability detai...

PT-2025-7834 · Unknown · Bplugins Sticky Content

Name of the Vulnerable Software and Affected Versions: bPlugins Sticky Content versions n/a through 1.0.1 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a Stored XSS...