3441 matches found
CVE-2025-10194 Shortcode Button <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-10194 Shortcode Button <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
EUVD-2025-34536
The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-10194
CVE-2025-10194 concerns the WordPress plugin Shortcode Button (
WordPress Shortcode Button plugin <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zakaria in WordPress Plugin Shortcode Button versions = 1.1.9...
WordPress plugin Shortcode Button 跨站脚本漏洞
WordPress Shortcode Button plugin is a plugin or function to quickly insert buttons through a short code, mainly used to simplify the process of adding buttons to a page or post, support for custom styles and parameter settings. WordPress Shortcode Button plugin has a cross-site scripting...
PT-2025-42289
Name of the Vulnerable Software and Affected Versions Shortcode Button plugin for WordPress versions up to and including 1.1.9 Description The plugin is susceptible to Stored Cross-Site Scripting through the 'button' shortcode. This is due to inadequate input sanitization and output escaping of...
PT-2025-42288
Name of the Vulnerable Software and Affected Versions WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress versions through 4.0.14 Description The WhyDonate plugin for WordPress is susceptible to unauthorized data loss. A missing capability check within the remove row...
CVE-2025-10194: Improper Neutralization of Input During Web Page Generation
The Shortcode Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-10186: Missing Authorization
The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the removerow function in all versions up to, and including, 4.0.15. This makes it possible for unauthenticated attackers to delete...
EUVD-2018-11551
Malware in sbrugna...
EUVD-2012-3500
Malware in sbrugna...
EUVD-2003-0898
Malware in sbrugna...
EUVD-2014-2353
Malware in sbrugna...
EUVD-2014-0891
Malware in sbrugna...
EUVD-2016-10691
Malware in sbrugna...
EUVD-2016-2711
Malware in sbrugna...
EUVD-2018-21546
Malware in sbrugna...