2666 matches found
PT-2025-40970
Name of the Vulnerable Software and Affected Versions Featured Image from URL FIFU plugin for WordPress versions prior to 5.2.8 Description The software is susceptible to Stored Cross-Site Scripting through the Featured Image custom fields of a post. Insufficient input sanitization and output...
CVE-2025-9876
The Ird Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'irdslider' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-9130
The Unify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's unifycheckout shortcode in all versions up to, and including, 3.4.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9129
The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-9859
The Fintelligence Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fintelligence-calculator' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2025-9030 Majestic Before After Image <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'beforelabel' and 'afterlabel' parameters in versions less than, or equal to, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2025-9030
CVE-2025-9030 concerns the Majestic Before After Image WordPress plugin (versions
EUVD-2025-27658
Malicious code in bioql PyPI...
EUVD-2025-25325
Malicious code in bioql PyPI...
EUVD-2025-28792
Malicious code in bioql PyPI...
EUVD-2025-27536
Malicious code in bioql PyPI...
EUVD-2024-45500
Malicious code in bioql PyPI...
EUVD-2025-28795
Malicious code in bioql PyPI...
EUVD-2025-28701
Malicious code in bioql PyPI...
EUVD-2025-31685
Malicious code in bioql PyPI...
EUVD-2025-25665
Malicious code in bioql PyPI...
EUVD-2025-27056
Malicious code in bioql PyPI...
EUVD-2025-28749
Malicious code in bioql PyPI...