2096 matches found
CVE-2025-12661 Pollcaster Shortcode Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Pollcaster Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' parameter in the 'pollcaster' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
CVE-2025-5092
Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library = 2.8.3 in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-9854
The A Simple Multilanguage Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'asmp-switcher' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
EUVD-2024-33030
Malicious code in bioql PyPI...
EUVD-2025-16480
Malicious code in bioql PyPI...
EUVD-2024-33314
Malicious code in bioql PyPI...
EUVD-2024-34281
Malicious code in bioql PyPI...
EUVD-2024-49989
Malicious code in bioql PyPI...
EUVD-2024-44008
Malicious code in bioql PyPI...
EUVD-2025-24199
Malicious code in bioql PyPI...
EUVD-2024-43992
Malicious code in bioql PyPI...
EUVD-2025-4547
Malicious code in bioql PyPI...
EUVD-2024-49509
Malicious code in bioql PyPI...
EUVD-2024-44300
Malicious code in bioql PyPI...
EUVD-2024-32649
Malicious code in bioql PyPI...
EUVD-2025-20374
Malicious code in bioql PyPI...
EUVD-2024-32380
Malicious code in bioql PyPI...
EUVD-2025-22505
Malicious code in bioql PyPI...