EUVD-2024-49254

Malicious code in bioql PyPI...

CVE-2024-13463

The SeatReg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'seatreg' shortcode in all versions up to, and including, 1.56.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2024-11778 CanadaHelps Embedded Donation <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The CanadaHelps Embedded Donation Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedcdn' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

CVE-2024-11940

CVE-2024-11940 relates to the Property Hive Mortgage Calculator plugin for WordPress. The flaw is a Stored Cross-Site Scripting (XSS) via the price parameter in all versions up to 1.0.6. Authenticated users with Contributor+ access can inject scripts that execute when pages are loaded by other us...