4158 matches found
PT-2025-42238
Name of the Vulnerable Software and Affected Versions WPBakery Page Builder versions prior to 8.6.1 Description The WPBakery Page Builder plugin for WordPress is affected by a Stored Cross-Site Scripting issue in the Custom JS module. Insufficient input sanitization and output escaping of...
PT-2025-42287
Name of the Vulnerable Software and Affected Versions Digiseller plugin for WordPress versions up to and including 1.3.0 Description The Digiseller plugin for WordPress is susceptible to Stored Cross-Site Scripting through the plugin’s ‘ds’ shortcode. This is due to inadequate input sanitization...
CVE-2025-10732: Missing Authorization
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1. This is due to improper access control implementation on the '/wp-json/sureforms/v1/srfm-global-settings' REST API endpoint...
CVE-2025-10190: Improper Neutralization of Input During Web Page Generation
The WP Easy Toggles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'toggles' shortcode in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-11197: Improper Neutralization of Input During Web Page Generation
The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-9496: Improper Neutralization of Input During Web Page Generation
The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's filemodified shortcode in all versions up to, and including, 4.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9371: Improper Neutralization of Input During Web Page Generation
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pagetitle’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sanitization and output escaping of theme breadcrumbs. This makes it possible for authenticated attackers, with...
CVE-2025-7400: Improper Neutralization of Input During Web Page Generation
The Featured Image from URL FIFU plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a post's Featured Image custom fields in all versions up to, and including, 5.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2025-9854
The A Simple Multilanguage Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'asmp-switcher' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
CVE-2025-9030: Improper Neutralization of Input During Web Page Generation
The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforelabel' and 'afterlabel' parameters in versions less than, or equal to, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
EUVD-2025-4729
Malicious code in bioql PyPI...
EUVD-2024-27448
Malicious code in bioql PyPI...
EUVD-2024-51569
Malicious code in bioql PyPI...
EUVD-2024-44538
Malicious code in bioql PyPI...
EUVD-2024-44429
Malicious code in bioql PyPI...
EUVD-2025-31693
Malicious code in bioql PyPI...
EUVD-2024-44373
Malicious code in bioql PyPI...
EUVD-2024-46743
Malicious code in bioql PyPI...