Lucene search
+L

409 matches found

Patchstack
Patchstack
•added 2026/01/12 4:11 a.m.•18 views

WordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jitlada in WordPress Plugin Flex QR Code Generator versions = 1.2.10...

5.9CVSS5.3AI score0.00162EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:17 a.m.•18 views

CVE-2025-23831

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mobstac QR Code Generator qrcode-wprhe allows DOM-Based XSS.This issue affects QR Code Generator: from n/a through = 1.2.6...

6.5CVSS7.2AI score0.00368EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/01/01 6:29 a.m.•12 views

Arbitrary Code Injection

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper sanitization of filenames used in generated headers. An attacker can provide a maliciously crafted filename containing Python syntax or esca...

5.4CVSS7.2AI score
SaveExploits0References3
Patchstack
Patchstack
•added 2025/12/08 6:45 a.m.•32 views

WordPress Flex QR Code Generator plugin <= 1.2.7 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ryan Kozak in WordPress Plugin Flex QR Code Generator versions = 1.2.7...

9.8CVSS5.3AI score0.00734EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/12/06 5:49 a.m.•55 views

CVE-2025-12673 Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS0.00734EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/06 12:00 a.m.•1 views

CVE-2025-12673: Unrestricted Upload of File with Dangerous Type

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS6.3AI score0.00734EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/06 12:00 a.m.•24 views

WordPress plugin Flex QR Code Generator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS6.8AI score0.00734EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•13 views

EUVD-2025-35392

Cross-Site Request Forgery CSRF vulnerability in Dmitry V. CEO of "UKR Solution" UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Cross Site Request Forgery.This issue affects UPC/EAN/GTIN Code Generator: from n/a through = 2.0.2...

6.5AI score0.00149EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•0 views

CVE-2025-62009: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Dmitry V. CEO of "UKR Solution" UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Cross Site Request Forgery.This issue affects UPC/EAN/GTIN Code Generator: from n/a through = 2.0.2...

4.3CVSS5.8AI score0.00149EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•13 views

WordPress plugin UPC/EAN/GTIN Code Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.7AI score0.00149EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/15 9:15 a.m.•83 views

CVE-2025-10041

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS0.0092EPSS
SaveExploits3References4
Cvelist
Cvelist
•added 2025/10/15 8:25 a.m.•60 views

CVE-2025-10041 Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS0.0092EPSS
SaveExploits3References4
CVE
CVE
•added 2025/10/15 8:25 a.m.•56 views

CVE-2025-10041

The CVE-2025-10041 entry concerns the Flex QR Code Generator WordPress plugin. Affected versions include all up to and including 1.2.5, where missing file type validation in the save_qr_code_to_db() function allows unauthenticated arbitrary file uploads, potentially enabling remote code execution...

9.8CVSS7.2AI score0.0092EPSS
SaveExploits3References4
EUVD
EUVD
•added 2025/10/15 8:25 a.m.•53 views

EUVD-2025-34561

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS7.1AI score0.0092EPSS
SaveExploits3References4
Patchstack
Patchstack
•added 2025/10/15 12:27 a.m.•19 views

WordPress Flex QR Code Generator plugin <= 1.2.5 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by johska in WordPress Plugin Flex QR Code Generator versions = 1.2.5...

9.8CVSS7.2AI score0.0092EPSS
SaveExploits3References1Affected Software1
CNNVD
CNNVD
•added 2025/10/15 12:00 a.m.•109 views

WordPress plugin Flex QR Code Generator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7.4AI score0.0092EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•1 views

CVE-2025-10041: Unrestricted Upload of File with Dangerous Type

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS6.3AI score0.0092EPSS
SaveExploits3References1
Fedora
Fedora
•added 2025/10/09 1:15 a.m.•15 views

[SECURITY] Fedora 41 Update: rust-protobuf-codegen-3.7.2-1.fc41

Code generator for rust-protobuf. Includes a library to invoke programmatically e. g. from build.rs and protoc-gen-rs binary...

5.9CVSS7.1AI score0.0044EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•7 views

EUVD-2022-24470

Malicious code in bioql PyPI...

8.8CVSS8AI score0.00892EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-52878

Malicious code in bioql PyPI...

9.3CVSS9.2AI score0.00769EPSS
SaveExploits1References1
Rows per page
Query Builder