2096 matches found
CVE-2025-12661 Pollcaster Shortcode Plugin <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Pollcaster Shortcode Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' parameter in the 'pollcaster' shortcode in all versions up to, and including, 1.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes...
CVE-2025-5092
Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library = 2.8.3 in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-9854
The A Simple Multilanguage Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'asmp-switcher' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
EUVD-2025-6423
Malicious code in bioql PyPI...
EUVD-2024-43967
Malicious code in bioql PyPI...
EUVD-2025-12497
Malicious code in bioql PyPI...
EUVD-2025-22505
Malicious code in bioql PyPI...
EUVD-2025-12295
Malicious code in bioql PyPI...
EUVD-2025-4547
Malicious code in bioql PyPI...
EUVD-2024-43992
Malicious code in bioql PyPI...
EUVD-2025-7361
Malicious code in bioql PyPI...
EUVD-2024-51614
Malicious code in bioql PyPI...
EUVD-2024-33303
Malicious code in bioql PyPI...
EUVD-2024-49509
Malicious code in bioql PyPI...
EUVD-2025-4710
Malicious code in bioql PyPI...
EUVD-2024-51571
Malicious code in bioql PyPI...
EUVD-2024-34281
Malicious code in bioql PyPI...
EUVD-2024-34137
Malicious code in bioql PyPI...