3463 matches found
EUVD-2025-34536
The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-10194 Shortcode Button <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-10194
CVE-2025-10194 concerns the WordPress plugin Shortcode Button (
WordPress Shortcode Button plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Shortcode Button versions = 1.1.9...
PT-2025-42289
Name of the Vulnerable Software and Affected Versions Shortcode Button plugin for WordPress versions up to and including 1.1.9 Description The plugin is susceptible to Stored Cross-Site Scripting through the 'button' shortcode. This is due to inadequate input sanitization and output escaping of...
WordPress plugin Shortcode Button 跨站脚本漏洞
WordPress Shortcode Button plugin is a plugin or function to quickly insert buttons through a short code, mainly used to simplify the process of adding buttons to a page or post, support for custom styles and parameter settings. WordPress Shortcode Button plugin has a cross-site scripting...
CVE-2025-10186: Missing Authorization
The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.15. This makes it possible for unauthenticated attackers to delete...
CVE-2025-10194: Improper Neutralization of Input During Web Page Generation
The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2025-42288
Name of the Vulnerable Software and Affected Versions WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress versions through 4.0.14 Description The WhyDonate plugin for WordPress is susceptible to unauthorized data loss. A missing capability check within the remove row...
EUVD-2012-1034
Malware in sbrugna...
EUVD-2011-2822
Malware in sbrugna...
EUVD-2010-4850
Malware in sbrugna...
EUVD-2012-3500
Malware in sbrugna...
EUVD-2007-6502
Malware in sbrugna...
EUVD-2021-15888
Malware in sbrugna...
EUVD-2016-2711
Malware in sbrugna...
EUVD-2014-1265
Malware in sbrugna...
EUVD-2002-1828
Malware in sbrugna...